IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  SOAR resilient DR question

    Posted 06/01/21 01:01 PM
    According to IBM documentation, when upgrading the DR system, the first step is to disable DR.
    The instructions say to manually disable and stop the Resilient platform by running the commands to disable and stop resilient on the master appliance.

    Does this actually stop the current, live instance of resilient?

    On the master appliance, manually disable and stop the Resilient platform by running the following commands:     
    sudo systemctl disable resilient
sudo systemctl stop resilient


    ------------------------------
    Tim Gray
    ------------------------------


  • 2.  RE: SOAR resilient DR question

    Posted 06/02/21 02:16 AM
    Hi Tim,

    Yes it does. Prior to stopping the service SOAR is only running on the master. Once stopped you can proceed with the upgrade of the master and the receiver. Finally, enable DR and you're back up and running.

    https://www.ibm.com/docs/en/rsoa-and-rp/41?topic=guide-upgrading-dr

    ------------------------------
    BEN WILLIAMS
    ------------------------------



Related Content