What does QRadar attempt to do when the system generates “Accumulator is falling behind” warnings?
What does QRadar attempt to do when the system generates “Accumulator is falling behind” warnings?
When the system generates 'Accumulator is falling behind' warnings, QRadar does not drop events or categorize them differently; instead, it impacts the time-series graphs and reports. The correct course of action is that time-series graphs and reports omit columns for the period when the problem occurred to prevent displaying misleading information for the time when data accumulation issues were present.
Answer is D https://www.ibm.com/docs/en/qsip/7.4?topic=appliances-accumulator-is-falling-behind
C https://www.ibm.com/docs/en/qsip/7.4?topic=appliances-accumulator-is-falling-behind
Why not D
please don't post wrong answer, your answer misleading
The right answer is A https://www.ibm.com/docs/en/qsip/7.4?topic=appliances-accumulator-is-falling-behind
Sorry, it is D