In the QRadar GUI. you notice that no new offenses were generated today. A review of the notifications shows:
MPC: Unable to create new offense. The maximum number of active offenses has been reached.
What is the default value of the maximum number?
If the option 'Include in my Dashboard' cannot be selected when creating a saved search in IBM QRadar SIEM V7.5, a possible reason is insufficient permissions. Here's why:
Permissions: The user needs appropriate permissions to add saved searches to the dashboard.
Role-Based Access Control: QRadar uses role-based access control to manage user permissions. The user's role must include the necessary privileges to modify dashboards.
Verification: Ensure that the user has the correct permissions assigned. This can be checked and adjusted in the user management settings.
Reference IBM QRadar SIEM administration guides explain the permissions required for various actions, including adding saved searches to dashboards, and how to configure user roles and permissions.
Cheryl
23 days agoRodrigo
1 days agoBrande
28 days agoJanae
1 days agoThaddeus
7 days agoLorrine
1 months agoChi
3 days agoTennie
7 days agoMerlyn
23 days agoNell
1 months agoLaquanda
16 days agoBenton
2 months agoRima
2 months agoFlorinda
2 months ago