IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

I have deployed QRadar SIEM (BYOL) on Azure, now I want to install DataGateway ISO from the AIO console, but I cant find Hosted QRadar in admin tab, can any help me with a solution

  • 1.  I have deployed QRadar SIEM (BYOL) on Azure, now I want to install DataGateway ISO from the AIO console, but I cant find Hosted QRadar in admin tab, can any help me with a solution

    Posted Tue January 30, 2024 07:29 AM



    ------------------------------
    SAROSH SHAJI
    ------------------------------



  • 2.  RE: I have deployed QRadar SIEM (BYOL) on Azure, now I want to install DataGateway ISO from the AIO console, but I cant find Hosted QRadar in admin tab, can any help me with a solution

    Posted Tue January 30, 2024 07:38 AM

    Data Gateways are for the SaaS hosted service "QRadar on Cloud (QRoC)"

    For a QRadar SIEM deployment, you should look at Managed Hosts (EC, EP, FP, FC, DN, ...) or the Disconnected Log Collector (DLC)

    See https://www.ibm.com/docs/en/qsip/7.5?topic=deployment-qradar-architecture-overview

    Paul



    ------------------------------
    Paul Ford-Hutchinson
    ------------------------------



  • 3.  RE: I have deployed QRadar SIEM (BYOL) on Azure, now I want to install DataGateway ISO from the AIO console, but I cant find Hosted QRadar in admin tab, can any help me with a solution

    Posted Tue January 30, 2024 07:48 AM

    Hello, 

    A  datagateway is only for our QRadar on Cloud deployments hosted by IBM.

    If you have installed a console in Azure. Then the managed host you will be looking to create is an Event Collector or an Event Processor. 

    So depending on where you are installing the Managed host. 
    If in Azure just install as you did before but do a EC or EP install.

    If in another VM or HW, then just download the iso direct from fixcentral:
    https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=7.5.0&platform=Linux&function=all#ISO



    ------------------------------
    Comghall Morgan
    QRadar Support Architect
    IBM
    ------------------------------