IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  how to get the App host software

    Posted 08/31/23 10:03 AM

    Hi,

    I am out of ressource with my all in one and would like to deploy an App Host to host all the applications.

    I don't know where and how to get the Iso file for the apphost , I went throught the IBM fix central and password advantage page but nothing.

    is someone knows how  can get it and do the installation ?

    thanks



    ------------------------------
    Benjamin Yabre
    ------------------------------


  • 2.  RE: how to get the App host software

    Posted 09/01/23 04:23 AM

    You use the same ISO as for the SIEM ; during installation you will have the option to select the type of system and one option will be AppHost (same would be for e.g. Event processors, Event collector, Risk Manager ...). 

    Note: AFAIK, from the licensing point of view, any non-appliance QRadar installed instance (i.e. on your own server or VM instead of the appliance purchased from IBM) will require you to have a so called Software Node license (basically covering the RedHat subscription for the RedHat code underneath). This is a "procedural" requirement (no technical obstacles). 



    ------------------------------
    Dusan VIDOVIC
    ------------------------------



  • 3.  RE: how to get the App host software

    Posted 09/01/23 08:21 AM

    hello,

    thanks for your reply, did you mean that I can',t use my own VM and deploy the Qradar ISO download from IBM Fix Central on it ?



    ------------------------------
    Benjamin Yabre
    ------------------------------

    Original Message


  • 4.  RE: how to get the App host software

    Posted 09/01/23 09:12 AM

    You can - as mentioned, there are no technical obstacles. What licenses and how many you acquired is a different question, and that is where you / your company needs to go through the software inventory and decide if you may install it (and not be in breach of licensing agreement); if in doubt, best is to contact your IBM representative. 



    ------------------------------
    Dusan VIDOVIC
    ------------------------------

    Original Message


  • 5.  RE: how to get the App host software

    Posted 09/01/23 10:06 AM

    Thanks a lot



    ------------------------------
    Benjamin Yabre
    ------------------------------

    Original Message


  • 6.  RE: how to get the App host software

    Posted 09/01/23 11:46 AM

    There is no separate apphost ISO. Just download the Qradar ISO of your version, install and select the role 'Apphost' during the install, then install updates (sfs, interimfix), so you'll have the same version as your console, ep, ec and any other managed hosts.



    ------------------------------
    László Pál
    ------------------------------



  • 7.  RE: how to get the App host software

    Posted 09/01/23 12:30 PM

    system requirement:  https://www.ibm.com/docs/en/qradar-on-cloud?topic=SSKMKU/com.ibm.qradar.doc/c_adm_apphost.htm

    installation guide:  https://www.ibm.com/docs/en/qsip/7.4?topic=hosts-installing-app-host

    summary: 

       1. get the ISO from fix central; install it on hardware or VM (see the system requirement link to get the proper size - CPU, Memory, Storage, etc.) 

       2. apply necessary patches so that it'll have the SAME version as your current system(s)

       3.  once it is ready, add it as a managed host to your existing environment (remember to do full deploy)

       4.  start migrating the apps from the console to the app host

       5.  check with your qradar sales rep to see if you need additional licenses for your deployment (CYA)

    -nelson



    ------------------------------
    nelson lee
    ------------------------------



Related Content