Hardware requirements

IBM Security QRadar® Suite Software is supported and tested for AMD64 architecture.

Important: These requirements are for one instance of QRadar Suite Software running on Red Hat® OpenShift® Container Platform.

The system disk requirements do not include the persistent storage requirements. The persistent storage requirement for IBM Security QRadar Suite Software is 3.5 TB. For more information, see Storage requirements.

Hardware requirements for IBM Security QRadar Suite Software cluster configuration

The following table shows the hardware requirements for a deployment of IBM Security QRadar Suite Software.

Table 1. Hardware requirements for QRadar Suite Software cluster configuration
Node type Number of nodes CPU RAM Storage
Master 3 8 cores 32 GB 120 GB
Worker 3 16 cores 64 GB 120 GB
Figure 1. Hardware specifications for QRadar Suite Software cluster configuration
A 6-node cluster, which includes 3 master nodes with 16 GB RAM, 4 CPU cores, and 120 GB of storage each; 4 worker nodes with 32 GB RAM, 8 CPU cores, and 120 GB of storage each; and 3.5 TB of Kubernetes storage.
Tip: It is recommended to have multiple Availability Zones (AZs) to allow for a highly available and fault-tolerant instance of QRadar Suite Software.
Important: During the QRadar Suite Software installation, a prerequisite check is run to verify that your cluster has a minimum of 48 cores CPU and 192 GB RAM. If your cluster does not meet the minimum hardware requirements, the deployment is blocked.

Hardware requirements for IBM Cloud managed Classic or VPC

The minimum hardware requirements for IBM Cloud® managed Classic or VPC are shown in the following table.

Table 2. Minimum hardware requirements for IBM Cloud Classic or VPC
Node type Number of nodes CPU RAM
Worker 3 16 cores 64 GB

Logging and monitoring are enabled by default in Red Hat OpenShift Container Platform. You can disable logging and monitoring during the provisioning of the cluster.

Hardware requirements for logging and monitoring

To enable the logging subsystem for your Red Hat OpenShift Container Platform, see Installing the logging subsystem for Red Hat OpenShift.

The additional hardware requirements to enable logging and monitoring are shown in the following table.
Table 3. Hardware requirements for logging and monitoring
Node type Number of nodes CPU RAM
Worker 1 16 cores 64 GB

Hardware requirements for horizontal scaling for IBM Security QRadar SOAR

If you want to enable horizontal scaling for IBM® Security QRadar SOAR as described in Configuring resources for SOAR, check the following hardware requirements for vertical and horizontal scaling.

Table 4. Vertical scaling requirements
  Request Limit
Deployment CPU (m) RAM (Mi) CPU (m) RAM (Mi)
Unitary SOAR pod 8410 11736 14350 13744
Total 8410 11736 14350 13744
Table 5. Horizontal scaling requirements
  Request Limit
Deployment CPU (m) RAM (Mi) CPU (m) RAM (Mi)
3 by REST API component 3 by 660 3 by 5080 3 by 6350 3 by 7088
1 by daemon component 666 5080 6350 7088
Total 2646 20320 25400 28352