In the QRadar GUI. you notice that no new offenses were generated today. A review of the notifications shows:
MPC: Unable to create new offense. The maximum number of active offenses has been reached.
What is the default value of the maximum number?
If the option 'Include in my Dashboard' cannot be selected when creating a saved search in IBM QRadar SIEM V7.5, a possible reason is insufficient permissions. Here's why:
Permissions: The user needs appropriate permissions to add saved searches to the dashboard.
Role-Based Access Control: QRadar uses role-based access control to manage user permissions. The user's role must include the necessary privileges to modify dashboards.
Verification: Ensure that the user has the correct permissions assigned. This can be checked and adjusted in the user management settings.
Reference IBM QRadar SIEM administration guides explain the permissions required for various actions, including adding saved searches to dashboards, and how to configure user roles and permissions.
Cheryl
1 months agoMarvel
7 days agoBarrett
10 days agoRodrigo
19 days agoBrande
2 months agoJunita
14 days agoJanae
19 days agoThaddeus
25 days agoLorrine
2 months agoChi
21 days agoTennie
25 days agoMerlyn
1 months agoNell
2 months agoWenona
3 days agoTheron
5 days agoErnie
14 days agoLaquanda
1 months agoBenton
3 months agoRima
3 months agoFlorinda
3 months ago