IBM QRadar Data Synchronization app

IBM® QRadar Data Synchronization provides resilience for your IBM QRadar deployment during disaster events. When QRadar Data Synchronization is set up, your QRadar configurations and data are automatically mirrored to another identical QRadar system. The second system ensures that operations can continue to function. You can recover from a failure of the main site when you have two identical QRadar systems in separate geographic environments and data is mirrored on both sites.

Important:
  • Both the main site and destination site must be on the same QRadar and App version. For more information, see QRadar: Data Synchronization App FAQ.
  • Log source integration must not be performed on the destination site while the main site is active.
  • The destination site must use hostnames that are different from the main site, including the console and all managed hosts.

For more information about IBM QRadar Data Synchronization, see Introducing the IBM QRadar Data Synchronization App (https://community.ibm.com/community/user/security/blogs/joel-violette1/2020/09/08/interrecord-separator).

License requirements

The QRadar Data Synchronization solution is a paid service. To be within IBM license compliance and for QRadar Data Synchronization to be effective, you must purchase a QRadar Data Synchronization license. Contact your sales representative for more information.

If you are a new customer to data synchronization for QRadar and want to use QRadar Data Synchronization for your recovery solution, you must purchase QRadar Data Synchronization licenses for every host in your deployment. Contact your sales representative for more information.

If you already have an implemented licensed recovery solution, you are entitled to use QRadar Data Synchronization without purchasing QRadar Data Synchronization licenses. When you renew your QRadar maintenance, you must then purchase theQRadar Data Synchronization license. In this situation, your deployments between the main site and destination site must have an exact 1:1 mapping ratio. For more information, see Introducing the IBM QRadar Data Synchronization App (https://community.ibm.com/community/user/security/blogs/joel-violette1/2020/09/08/interrecord-separator).