IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Update DNS in QRadar HA Deployment without breaking HA

    Posted Mon December 16, 2019 10:28 AM
    Hi there,

    is there a way not to break HA and remove all managed host from my deployment, if I only want to update the DNS server?

    Does anyone knows a way around?
    Thanks!

    From the Installation Guide 7.3.2

    Chapter 9. Network settings management

    Use the qchange_netsetup script to change the network settings of your IBM QRadar system. Configurable network settings include host name, IP address, network mask, gateway, DNS addresses, public IP address, and email server.

    Changing the network settings in an all-in-one system

    You can change the network settings in your all-in-one system. An all-in-one system has all IBM QRadar components that are installed on one system.

    Before you begin

    • You must have a local connection to your QRadar Console
    • Confirm that there are no undeployed changes.
    • If you are changing the IP address host name of a box in the deployment you must remove it from the deployment.
    • If this system is part of an HA pair you must disable HA first before you change any network settings.
    • If the system that you want to change is the console, you must remove all hosts in the deployment before proceeding.


    ------------------------------
    Kind regards
    Oliver
    ------------------------------


  • 2.  RE: Update DNS in QRadar HA Deployment without breaking HA

    Posted Sun May 10, 2020 10:43 AM
    Dear Oliver,

    I was searching for the same and IBM documentations as well all know are really not matured enough to cover these points, were you able to do the above activity? Would like to hear from you.

    T&R

    ------------------------------
    Arjun Kumar Network & Security Engineer
    ------------------------------



  • 3.  RE: Update DNS in QRadar HA Deployment without breaking HA

    Posted Mon May 11, 2020 03:50 PM
    Hi Arjun,

    unfortunately, there is no supported way without the procedure described above. Afterwards I asked an IBM developer about this topic and he told me a fieldfix, but unfortunately it is not persistent.

    Sorry.

    ------------------------------
    Kind regards
    Oliver
    ------------------------------



  • 4.  RE: Update DNS in QRadar HA Deployment without breaking HA

    Posted Tue May 12, 2020 01:26 AM
    Dear Oliver,
    Much appreciate your response. It's unfortunate that these things are not documented well.

    T&R
    Arjun

    ------------------------------
    Arjun Kumar Network & Security Engineer
    ------------------------------