CYBERQUEST Licensing and Versioning
CYBERQUEST is available both as a free edition or as a commercial edition. The commercial editions are: Logger, Light, Advanced, Enterprise and Ultimate. The table below details the features of each edition:
|Description / version||Free||Logger||Light||Advanced||Enterprise||Ultimate|
|Daily GB of data||1||2||10||160||600||Unlimited*|
|Dashboards per dashgroup||6||9||12||15||24||Unlimited*|
|Dashgroups per instance||2||4||6||10||16||Unlimited*|
|Data permissions-no. of filters||⨉||⨉||2||10||Unlimited*||Unlimited*|
|Short term Data Storage (days)||15||30||30||90||Unlimited*||Unlimited*|
|Long term Data Storage (days)||⨉||⨉||365||730||Unlimited*||Unlimited*|
|Max. no. of Elastic Search Nodes/instance||1||1||2||3||Unlimited*||Unlimited*|
|Max. no. of DTS Objects||4||6||10||15||Unlimited*||Unlimited*|
|Windows Agent Collection||🗸||🗸||🗸||🗸||🗸||🗸|
|ODBC Data Collection||🗸||🗸||🗸||🗸||🗸||🗸|
|Syslog Data Collection||🗸||🗸||🗸||🗸||🗸||🗸|
|NetFlow Data Collection||⨉||⨉||⨉||🗸||🗸||🗸|
|Multiple Data server for advanced technologies||⨉||⨉||⨉||🗸||🗸||🗸|
|Simple Alerts (1 step rules)||⨉||⨉||20||50||Unlimited*||Unlimited*|
|Correlated Alerts (multi step rules)||⨉||⨉||5||20||Unlimited*||Unlimited*|
|Add-on 2, 4 or 8 Cores-extra fee||⨉||🗸||🗸||🗸||🗸||🗸|
|Add-on 1GB, 5GB, 10GB or 100 GB/day-extra fee||⨉||🗸||🗸||🗸||🗸||n/a|
*No limit set in the license. Performance is dependent on the resource allocation.
**The license is for 1 CPU. Minimum numbers of license cores that can be purchased is 4.
How CYBERQUEST license works
A short description of each criteria subject to license can be found below:
Max. no. of users is the maximum number of active users the solution allows
No. of cores included: the solution runs on a standalone machine based on Linux Debian 9 operating system. The number of CPU cores included in license represents the maximum number of CPU cores of the system where CYBERQUEST runs
Up to no. of EPS included: is the maximum number of events per second the solution can process and is calculated mostly by the number of CPU cores, but also the hardware capabilities of the system
Max Data per day GB: depending on instance configuration, represents the maximum quantity of data the solution can process, according to your license.
Max number of CPU Cores per instance: is the maximum number of CPU cores which can be licensed for a CYBERQUEST instance. It can be increased by adding licenses for more CPU cores (add-ons)
Dashboards: notifies if the selected edition has access to Dashboards functionality in CYBERQUEST
Custom Dashboards: notifies if the selected edition has access to editing and creating dashboards by platform users
Max number of active Dashboards per Dashgroup: notifies on the maximum number of dashboards that can be active in a dashgroup for the selected edition
Max number of Dashgroups: represents the maximum number of groups which can be active in an instance
Data Permissions: number of filters: notifies on the permission to apply filters on data processed by CYBERQUEST, as well as the number of filters on which the licensing allows
Short Term Data Storage (days): depending on the storage capacity, represents the maximum number of days allowed by license, for which data can be stored in the online database
Long Term Data Storage (days): depending on the storage capacity, represents the maximum number of days allowed by license, for which data can be stored in the offline database, and if archiving is allowed by license
Max number of ElasticSearch Nodes per instance: is the maximum number of ElasticSearch nodes allowed by license to be attached to a CYBERQUEST instance
Max number of DTS Objects: is the maximum number of active objects allowed by license in CYBERQUEST's Data Transformation Services module.
Geolocation: notifies if the selected edition has access to geolocation functionality in CYBERQUEST
Reports: notifies if the selected edition has access to Reports functionality in CYBERQUEST
Compliance Reports: notifies if your license activates also the built-in compliance reports to standards
Asset Management: refers to inventorying capability in CYBERQUEST being active or not within your license
Windows Agent Collection: notifies if the selected edition can use Windows Agent-based gathering
ODBC Data Collection: notifies if the selected edition can use ODBC-based gathering
Syslog Data Collection: notifies if the selected edition can use syslog-based gathering
NetFlow Data Collection: notifies if the selected edition can use NetFlow gathering
NetFlow Stitching: notifies if the selected edition can pair send and receive events for TCP/IP communication and forming a unified event in this process
Multiple Data Server for advanced topologies: represents the ability to deploy multiple Data Server instances in order to collect data from various network segments
MultiTenancy: represents the ability to run multiple clients on the same instance
Simple Alerts (1 step rules): notifies if the selected edition can use, and the maximum number allowed, for single step alerts
Correlated Alerts (multi-step rules): notifies if the selected edition can use, and the maximum number allowed, for multiple step alerts
Summary Alerts: notifies if the selected edition can use, and the maximum number allowed, for summary alerts
Depending on the licensing model you choose, there are also restrictions on the available connectors, nodes and various configuration objects.
To access Licensing module, go to Settings > About. About CYBERQUEST window opens containing information about your accessed instance.
Available information in the About CYBERQUEST window is:
- Hardware ID - Unique hardware ID of CYBERQUEST machine and for which permanent license is issued
- License days left - information about the number of days for license availability
- License type - notifying if your product is licensed, under grace period or not licensed
- Edition - platform edition for which the license was registered
The window also contains version and build date for each component module.
A new license key can be pasted into License Key field and applied by pressing Add License Key button. An added license can either replace the current license, or provide additional functionalities like with add-on licenses.
The Clear license cache button forces the update of the license details in the web interface.
Click to display detailed information about your license.