CYBERQUEST Licensing and Versioning
CYBERQUEST is available both as a free edition or as a commercial edition. The commercial editions are: Logger, Light, Advanced, Enterprise and Ultimate. The table below details the features of each edition:
| Description / version | Free | Logger | Light | Advanced | Enterprise | Ultimate |
|---|---|---|---|---|---|---|
| Users limit | 1 | 3 | 5 | 10 | 20 | Unlimited* |
| Included cores | 4 | 4 | 4 | 6 | 8 | 1** |
| Included EPS | 250 | 250 | 500 | 750 | 1000 | Unlimited* |
| Daily GB of data | 1 | 2 | 10 | 160 | 600 | Unlimited* |
| CPU cores/instance | 4 | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Dashboards | yes | yes | yes | yes | yes | yes |
| Custom dashboards | no | no | yes | yes | yes | yes |
| Dashboards per dashgroup | 6 | 9 | 12 | 15 | 24 | Unlimited* |
| Dashgroups per instance | 2 | 4 | 6 | 10 | 16 | Unlimited* |
| Data permissions-no. of filters | ⨉ | ⨉ | 2 | 10 | Unlimited* | Unlimited* |
| Short term Data Storage (days) | 15 | 30 | 30 | 90 | Unlimited* | Unlimited* |
| Long term Data Storage (days) | ⨉ | ⨉ | 365 | 730 | Unlimited* | Unlimited* |
| Max. no. of Elastic Search Nodes/instance | 1 | 1 | 2 | 3 | Unlimited* | Unlimited* |
| Max. no. of DTS Objects | 4 | 6 | 10 | 15 | Unlimited* | Unlimited* |
| Geolocation | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 |
| Reports | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 |
| Compliance Reports | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 |
| Asset Management | ⨉ | ⨉ | ⨉ | 🗸 | 🗸 | 🗸 |
| Windows Agent Collection | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 |
| ODBC Data Collection | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 |
| Syslog Data Collection | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 |
| NetFlow Data Collection | ⨉ | ⨉ | ⨉ | 🗸 | 🗸 | 🗸 |
| NetFlow Stitching | ⨉ | ⨉ | ⨉ | ⨉ | 🗸 | 🗸 |
| Multiple Data server for advanced technologies | ⨉ | ⨉ | ⨉ | 🗸 | 🗸 | 🗸 |
| MultiTenancy | ⨉ | ⨉ | ⨉ | ⨉ | ⨉ | 🗸 |
| Simple Alerts (1 step rules) | ⨉ | ⨉ | 20 | 50 | Unlimited* | Unlimited* |
| Correlated Alerts (multi step rules) | ⨉ | ⨉ | 5 | 20 | Unlimited* | Unlimited* |
| Summary Alerts | ⨉ | ⨉ | ⨉ | 20 | Unlimited* | Unlimited* |
| Add-on 2, 4 or 8 Cores-extra fee | ⨉ | 🗸 | 🗸 | 🗸 | 🗸 | 🗸 |
| Add-on 1GB, 5GB, 10GB or 100 GB/day-extra fee | ⨉ | 🗸 | 🗸 | 🗸 | 🗸 | n/a |
*No limit set in the license. Performance is dependent on the resource allocation.
**The license is for 1 CPU. Minimum numbers of license cores that can be purchased is 4.
How CYBERQUEST license works
A short description of each criteria subject to license can be found below:
-
Max. no. of users is the maximum number of active users the solution allows
-
No. of cores included: the solution runs on a standalone machine based on Linux Debian 9 operating system. The number of CPU cores included in license represents the maximum number of CPU cores of the system where CYBERQUEST runs
-
Up to no. of EPS included: is the maximum number of events per second the solution can process and is calculated mostly by the number of CPU cores, but also the hardware capabilities of the system
-
Max Data per day GB: depending on instance configuration, represents the maximum quantity of data the solution can process, according to your license.
-
Max number of CPU Cores per instance: is the maximum number of CPU cores which can be licensed for a CYBERQUEST instance. It can be increased by adding licenses for more CPU cores (add-ons)
-
Dashboards: notifies if the selected edition has access to Dashboards functionality in CYBERQUEST
-
Custom Dashboards: notifies if the selected edition has access to editing and creating dashboards by platform users
-
Max number of active Dashboards per Dashgroup: notifies on the maximum number of dashboards that can be active in a dashgroup for the selected edition
-
Max number of Dashgroups: represents the maximum number of groups which can be active in an instance
-
Data Permissions: number of filters: notifies on the permission to apply filters on data processed by CYBERQUEST, as well as the number of filters on which the licensing allows
-
Short Term Data Storage (days): depending on the storage capacity, represents the maximum number of days allowed by license, for which data can be stored in the online database
-
Long Term Data Storage (days): depending on the storage capacity, represents the maximum number of days allowed by license, for which data can be stored in the offline database, and if archiving is allowed by license
-
Max number of ElasticSearch Nodes per instance: is the maximum number of ElasticSearch nodes allowed by license to be attached to a CYBERQUEST instance
-
Max number of DTS Objects: is the maximum number of active objects allowed by license in CYBERQUEST's Data Transformation Services module.
-
Geolocation: notifies if the selected edition has access to geolocation functionality in CYBERQUEST
-
Reports: notifies if the selected edition has access to Reports functionality in CYBERQUEST
-
Compliance Reports: notifies if your license activates also the built-in compliance reports to standards
-
Asset Management: refers to inventorying capability in CYBERQUEST being active or not within your license
-
Windows Agent Collection: notifies if the selected edition can use Windows Agent-based gathering
-
ODBC Data Collection: notifies if the selected edition can use ODBC-based gathering
-
Syslog Data Collection: notifies if the selected edition can use syslog-based gathering
-
NetFlow Data Collection: notifies if the selected edition can use NetFlow gathering
-
NetFlow Stitching: notifies if the selected edition can pair send and receive events for TCP/IP communication and forming a unified event in this process
-
Multiple Data Server for advanced topologies: represents the ability to deploy multiple Data Server instances in order to collect data from various network segments
-
MultiTenancy: represents the ability to run multiple clients on the same instance
-
Simple Alerts (1 step rules): notifies if the selected edition can use, and the maximum number allowed, for single step alerts
-
Correlated Alerts (multi-step rules): notifies if the selected edition can use, and the maximum number allowed, for multiple step alerts
-
Summary Alerts: notifies if the selected edition can use, and the maximum number allowed, for summary alerts
Depending on the licensing model you choose, there are also restrictions on the available connectors, nodes and various configuration objects.
To access Licensing module, go to Settings > About. About CYBERQUEST window opens containing information about your accessed instance.
Available information in the About CYBERQUEST window is:
- Hardware ID - Unique hardware ID of CYBERQUEST machine and for which permanent license is issued
- License days left - information about the number of days for license availability
- License type - notifying if your product is licensed, under grace period or not licensed
- Edition - platform edition for which the license was registered
The window also contains version and build date for each component module.
A new license key can be pasted into License Key field and applied by pressing Add License Key button. An added license can either replace the current license, or provide additional functionalities like with add-on licenses.
The Clear license cache button forces the update of the license details in the web interface.
Click 
to display detailed information about your license.
