Data Store is configured using a simple collection filter in QRadar. By selecting the data source or the event criteria from the data source, you can easily define which data is sent directly to Data Store. This filter can be changed at any time and immediately pushed into production. \r