QRadar event data is stored in the Ariel database on the Event Processor and any attached Data Nodes. The Event Processor is responsible for processing incoming events, performing correlation, and storing the event data. The attached Data Nodes provide additional storage capacity and can be used to extend the storage available to the Event Processor.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit