What is the maximum time period for 3 subsequent events to be coalesced?
A. 10 minutes
B. 10 seconds
C. 5 minutes
D. 60 seconds
Explanation:
Event coalescing starts after three events have been found with matching properties within a 10 second window.
Reference: https://www.ibm.com/support/pages/qradar-how-does-coalescing-work-qradar