IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  QRadar full memory to install apps

    Posted Fri January 15, 2021 01:09 PM

    My Qradar running on the 7.3.3 version. Now I meet a problem is a full memory to install new apps. I've already installed a new App Host (minimum requirement), added it to the Qradar Console. Then migrated apps from Console to App Host. I also checked on the command line that current apps are running on App Host. But the console still displays full memory in Qradar Assistant and I can't install new app.



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: QRadar full memory to install apps
    Best Answer

    Posted Mon January 18, 2021 11:08 AM

    Hi Jan,

    i assume you've read the following specifictions:

    https://www.ibm.com/support/knowledgecenter/SS42VS_7.4/com.ibm.qradar.doc/c_adm_apphost.html

    It sounds like 12 GB RAM for (small apphost) seems to be not enough for the apps you are try to run.

    Specifically Apps like DNS Analyzer or User Analytics with ML require more RAM.

    Maybe consider an app upgrade to 64GB RAM...

    Regards,

    Ralph



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: QRadar full memory to install apps
    Best Answer

    Posted Tue January 19, 2021 02:58 AM

    Hi Ralph,

    My QRadar Console has 128 GB RAM, so follow the mention in the IBM document "Consider that your QRadar Console appliance or VM has a limit of 10% of the overall appliance memory allocated to apps."

    => This means my console has 12GB RAM for running apps, so I've deployed the new App Host (small app host - 12GB RAM) seems there is the same amount of RAM and still not enough to run more apps. So I need to upgrade to 64GB RAM for App Host, this will resolve my problem.

    Thank you so much, Ralph!

    Regards,

    Hai Dinh



    #QRadar
    #Support
    #SupportMigration