When it comes to licensing, what is the difference between Events and Flows and how they are licensed?
When it comes to licensing, what is the difference between Events and Flows and how they are licensed?
A . Flows are licensed based on overall count over a minute, where Events are licensed based on overall count per second.
B . Flows are licensed based on overall count per second, where Events are licensed based on overall count over a minute.
C . Flows and Events are both licensed by overall count per minute under an Upgraded License and per second on a Basic License.
D . Flows and Events are both licensed by overall count per second under an Upgraded License and per second on a Basic License.
Answer: A
Explanation:
A significant difference between event and flow data is that an event, which typically is a log of a
specific action such as a user login, or a VPN connection, occurs at a specific time and the event is logged at that time. A flow is a record of network activity that can last for seconds, minutes, hours, or days, depending on the activity within the session. For example, a web request might download multiple files such as images, ads, video, and last for 5 to 10 seconds, or a user who watches a Netflix movie might be in a network session that lasts up to a few hours. The flow is a record of network activity between two hosts.
Reference https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.2.8/com.ibm.qradar.doc/
c_qradar_deploy_event_and_flow_pipeline.html