Summary
In this chapter, we have discussed in a very simplified manner how QRadar can be managed. It is important to understand the fundamentals behind how QRadar is designed to be upgraded and scaled. During an upgrade, do follow the pre-upgrade checks. Many times, the pre-upgrade checks can fail. In such scenarios, open a case with IBM Support. Do not upgrade if the pre-upgrade checks fail. For scaling of QRadar, there are two factors to keep in mind – licensing and which components to use.
Once you master the skill of managing QRadar deployments, you have eliminated more than 80% of the issues that could eat up your time and efforts as a team. You will have more resources available to focus on integrating your security solutions with QRadar. In the upcoming chapter, we will learn how to integrate different data in QRadar.