What types of data does a Quick filter search operate on?

A Quick filter search in IBM Security QRadar SIEM operates on raw event or flow data. This type of search allows users to rapidly filter through large volumes of data to find specific events or flows of interest without the need for complex query syntax. Quick filter searches are particularly useful for conducting initial analyses or when looking for specific indicators within the raw data streams. The ability to search directly on raw event or flow data enables analysts to work with the most granular level of information available, facilitating detailed investigations and the identification of subtle patterns or anomalies that might indicate security issues .