IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Upgrade Questions aka GlusterFS to DRBD

    Posted Mon October 25, 2021 10:57 AM

    Hi to all PPL, please i'm going to upgrade Qradar 732 P6 to Qradar 743 P2 and i see the note about upgrade first distribuited Event Collectors from GlusterFS to DRBD with an IBM script. IBM, Jonathan please can confirm me about this ??

    "" https://www.ibm.com/support/pages/qradar-steps-migrate-glusterfs-distibuted-replication-block-device-event-collectors-using-migration-script "".

    This upgrade is only for Event Collectors as 1599 series or so for Combo Machine as 1899 series ??

    Many thanks and best Regards



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Upgrade Questions aka GlusterFS to DRBD

    Posted Mon October 25, 2021 07:23 PM

    Hi,

    as the note you mentioned describes, will the upgrade script fail, if a distributed EC Component was detected in the deployment. The script ends with a hint, first to migrate the EC component from glusterfs to drbd.

    I can confirm that from one of my migrations from 7.3.2FPx to 7.4.2FP3 a few month ago. I would expect the same procedure in your scenario.

    I have no experience of what happens when 7.4.2 is skipped..

    To be on the safe side, I would create a support ticket to check this.

    Regards,

    Ralph



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: Upgrade Questions aka GlusterFS to DRBD

    Posted Tue October 26, 2021 04:11 AM

    This migration script is only for EC (1599). 1899, which is a virtual Event and Flow Processor is not applicable in this migration.

    Also, you will see interactive prompt before the script goes ahead and do the migration. And while doing this, script will show you the appliance type that it will migrate.

    Please do follow the steps given the link that you have shared and it should be fine.



    #QRadar
    #Support
    #SupportMigration