What is the default value of the maximum number?

In the QRadar GUI. you notice that no new offenses were generated today.

A review of the notifications shows:

MPC: Unable to create new offense. The maximum number of active offenses has been reached.

What is the default value of the maximum number?
A . 3500
B . 1500
C . 5000
D . 2500

View Answer

Answer: D

Explanation:

In IBM QRadar SIEM V7.5, the default value for the maximum number of active offenses is set to 2500. This limit is in place to manage system performance and ensure efficient processing of security incidents. Here’s the detailed information:

Default Setting: The default setting for the maximum number of active offenses is 2500.

Impact: If this limit is reached, QRadar will not generate new offenses until some of the existing offenses are closed or archived.

Configuration: Administrators can adjust this setting based on their organizational needs, but the default value is 2500.

Reference

This information is detailed in the QRadar SIEM configuration and tuning guides, which specify default settings and provide instructions for modifying the maximum number of active offenses if necessary.