IBM QRadar SIEM empowers security analysts and security operations teams with the visibility, automation and insights needed to quickly detect anomalies and uncover advanced threats in real-time.

The QRadar App Host Image in AWS is a managed host that is dedicated to running apps. App Hosts provide extra storage, memory, and CPU resources for your apps without impacting the processing capacity of your QRadar Console. Apps such as User Behavior Analytics with Machine Learning Analytics require more resources than are currently available on the Console.

The App Host replaces the App Node that was available in previous versions of QRadar SIEM. Unlike the App Node, QRadar manages all updates to the App Host, and you can include the App Host in your high-availability deployments.
Migrating from an App Node to an App Host is a part of the upgrade from QRadar 7.3.0 or 7.3.1 to QRadar 7.3.2. If you are running an App Node, you must perform the migration because the App Node is not supported on QRadar 7.3.2 and later.