PrepAway - Latest Free Exam Questions & Answers

What is the maximum time period for 3 subsequent events to be coalesced?

What is the maximum time period for 3 subsequent events to be coalesced?

A. 10 minutes

B. 10 seconds

C. 5 minutes

D. 60 seconds

Explanation:
Event coalescing starts after three events have been found with matching properties within a 10 second window.

Reference: https://www.ibm.com/support/pages/qradar-how-does-coalescing-work-qradar


Leave a Reply