QRadar Assistant app V 1.1.5 and later include a new Phone Home feature, which anonymously shares data with the IBM X-Force Exchange to monitor QRadar and detect issues early.
Why Should I Opt in to the Phone Home Feature?
Opting in allows QRadar to proactively detect issues in QRadar before they affect your assets. It also helps how you use QRadar, to more effectively develop product features and services in those areas.
How do I Opt In?
After you update the QRadar Assistant app, a window will prompt you to agree or disagree to using the Phone Home feature. Select Agree to start using the feature.
If you want to opt in at a later time, select to the Help tab on the User Settings window, and select Opt In.
How do I Opt Out?
If you select Disagree, you are not prompted again until you update the app again. If you want to opt in later, click the Help tab on the User Settings window, and select Opt Out.
What Information is Shared?
The following table describes the information you can share with QRadar.
Table 1: Information Shared by the Phone Home Feature
Average EPS and FPS
The average events per second and flows per minute over 24 hours
Basic deployment information
Percentage of disk used on each host
Basic app information, such as number of extensions, extension name, application status
QRadar health metrics
Count of offenses, vulnerabilities, rules, log sources, and assets
Basic license information
User Login Count
Login count for previous week
Basic log source information
Network asset count
Basic notifications information
Basic offense information
QRadar Version Information
QRadar version (2014.8, 7.3.1)
Basic reference set information, including database servers, DHCP servers, and DNS servers
Top offenses count
Top rules count
This feature does not collect personally identifiable information. Information you share with the IBM X-Force Exchange does not include IP addresses, host names, log source information, or any other information that identifies specific customers.