Summary
In this chapter, we have looked at all the different ways data is ingested in QRadar. We also discussed different use cases and how QRadar provides solutions such as DLC, superflows, and event forwarding. As compliance and requirements change over time, QRadar comes up with unique use cases to comply with and fulfill requirements.
In the next chapter, we will look at how QRadar ensures that no data is lost while collecting and processing. We will also learn how to integrate data that is not supported out of the box.