IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Deploy HA Event Processor using VirtualBox

    Posted Wed January 29, 2020 09:34 AM
    Hi guys!
    I'm trying to deploy a lab with a console (AIO) and a HA Event processor. Everything goes fine while running the HA wizard, but it looks like the installation never ends. The status of the systems is always this one:


    When looking at the logs, I can find the following in the primary node:


    and it never gets beyond that point. The secondary looks to be trying something, but it's not getting any answer back:


    Does anyone know if I'm facing any technical limitations? License problem? Maybe I'm missing a step? Any help would be apreciated!

    Regards,
    Gabriel Crespo

    ------------------------------
    Gabriel Crespo
    ------------------------------


  • 2.  RE: Deploy HA Event Processor using VirtualBox

    Posted Thu January 30, 2020 09:40 AM
    Hi Gabriel,

    I'm not sure, if this is the reason that your installation fails, but Virtual Box is not on the list of supported hypervisors:

    quote from https://www.ibm.com/support/knowledgecenter/SS42VS_7.3.2/com.ibm.qradar.doc/t_siem_vrt_ap_create.html

    Create a virtual machine by using one of the following hypervisors:
    • VMWare ESXi with hardware version 13
    • KVM on CentOS or Red Hat Enterprise Linux 7.5 with QEMU KVM 1.5.3-141
    • The Hyper-V plugin on Windows Server 2016 with all Windows updates applied
    We mostly use VMWare and also have good experiences with Hyper-V on WinServer 2016.
    I can imagine that Virtual Box has some restrictions. 

    Is your AiO also running on Virtual Box?

    Kind regards Oliver

    ------------------------------
    Kind regards
    Oliver
    ------------------------------