Summary
This first chapter was all about understanding the different IBM QRadar components. Being a highly scalable product, it is imperative that we know which components are to be used to scale the solution. We also understood how the event and flow data is handled in QRadar by different QRadar components. With that, you now have an idea of the basic architecture of QRadar components and how they fit together.
In the next chapter, we will learn how these components work together.