When it comes to licensing, what is the difference between Events and Flows and how they are licensed?
A . Flows are licensed based on overall count over a minute, where Events are licensed based on overall count per second.
B . Flows are licensed based on overall count per second, where Events are licensed based on overall count over a minute.
C . Flows and Events are both licensed by overall count per minute under an Upgraded License and per second on a Basic License.
D . Flows and Events are both licensed by overall count per second under an Upgraded License and per second on a Basic License.
Answer: A
Explanation:
A significant difference between event and flow data is that an event, which typically is a log of a
specific action such as a user login, or a VPN connection, occurs at a specific time and the event is logged at that time. A flow is a record of network activity that can last for seconds, minutes, hours, or days, depending on the activity within the session. For example, a web request might download multiple files such as images, ads, video, and last for 5 to 10 seconds, or a user who watches a Netflix movie might be in a network session that lasts up to a few hours. The flow is a record of network activity between two hosts.
Reference https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.2.8/com.ibm.qradar.doc/
c_qradar_deploy_event_and_flow_pipeline.html