Summary
In this chapter, we have discussed how all-in-one deployment is different than distributed deployment. We also looked at modern security challenges of integrating multiple event, flow, and asset sources together to understand the security posture of your organization. Using all the QRadar components discussed, we can build a QRadar environment suitable for our security needs. We have discussed different QRadar components at length with diagrams to understand how they integrate with each other. Hopefully, along with the previous chapter, you now have a clearer idea of what the overall architecture of QRadar may look like.
In the next chapter, we will dive deep into the different types of QRadar deployments. Also, we will discuss how to scale and upgrade QRadar. The discussion will also include the use of a license in QRadar.
