IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Failed to install QRadar SIEM Console 7.3.3 in Azure

    Posted Tue March 02, 2021 12:37 PM
    Hi,

    I tried to to install QRadar Console 7.3.3 in Azure following the IBM instructions (https://www.ibm.com/support/knowledgecenter/SS42VS_7.3.3/com.ibm.qradar.doc/t_Cloud_Install_Qradar_Azure.html).

    After the VM has deployed and I set the IP to static, I ssh to the instance and run /root/setup_console.

    But the installation process stopped with the following error:

    ERROR: ERROR: errors found in install instructions: [('ai_appliance_oem', 'qradar.xxxxx.parx.internal.cloudapp.net', "must be one of ('qradar', 'dragon', 'juniper', 'forensics', 'qradarce')")]
    ERROR: Failed. Exit code: 255. Case 1.

    Looking at the logs shows that the error was raised executing the python file /opt/qradar/bin/qradar_netsetup.py: 

    Tue Mar 2 11:07:24 EST 2021 [setup]: /opt/qradar/bin/qradar_netsetup.py -y --no-eula
    Result = '255'
    ERROR: Failed to run qradar_netsetup.!

    Have someone faced the same issue ?

    I followed the documentation accurately, so I am realy wondering what is wrong...

    ------------------------------
    Francois Ihry
    ------------------------------


  • 2.  RE: Failed to install QRadar SIEM Console 7.3.3 in Azure

    Posted Wed March 03, 2021 08:47 AM
    Hi - We are running in Azure and it was a bumpy road to install. I think the biggest issue was around hostnames.....but I did run netsetup many times. One other trick was making sure I was following the right Azure install instructions for the version.



    Original Message


  • 3.  RE: Failed to install QRadar SIEM Console 7.3.3 in Azure
    Best Answer

    Posted Wed March 03, 2021 08:55 AM
    Hi Ian,

    After trying to reinstall several times, I finally found a way to go through.

    When it get blocked, edit the file AUTO_INSTALL_INSTRUCTIONS and replace "ai_appliance_oem=qradar.xxxxx.parx.internal.cloudapp.net" by "ai_appliance_oem=qradar".

    Then run :
    /opt/qradar/bin/qradar_netsetup.py -y --no-eula

    It will finish the install :)

    ------------------------------
    Francois Ihry
    ------------------------------

    Original Message


Related Content