Hello,
I tried to update my Qradar CE (7.3.3) manually as the auto-update does not work (see my other post).
I followed the official install instructions step by step
Release of QRadar 7.3.3 Fix Pack 10 SFS (7.3.3-QRADAR-QRSIEM-20211125190208)But it always fails, see here:
I obviously have no Wi-Fi enabled on this VM.
If this is relevant here is my
ip a:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc prio state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc prio state UP group default qlen 1000
link/ether 32:ba:47:74:a8:b3 brd ff:ff:ff:ff:ff:ff
inet 10.20.1.1/16 brd 10.20.255.255 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::30ba:47ff:fe74:a8b3/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 9a:cf:a2:f6:6d:73 brd ff:ff:ff:ff:ff:ff
inet6 fe80::98cf:a2ff:fef6:6d73/64 scope link
valid_lft forever preferred_lft forever
4: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:f9:be:63:e8 brd ff:ff:ff:ff:ff:ff
inet 169.254.2.1/24 brd 169.254.2.255 scope global docker0
valid_lft forever preferred_lft forever
inet6 2001:db8:4::1/80 scope global tentative
valid_lft forever preferred_lft forever
inet6 fe80::1/64 scope link tentative
valid_lft forever preferred_lft forever
5: dockerApps: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:bb:fa:66:ec brd ff:ff:ff:ff:ff:ff
inet 169.254.3.1/24 brd 169.254.3.255 scope global dockerApps
valid_lft forever preferred_lft forever
inet6 fe80::42:bbff:fefa:66ec/64 scope link
valid_lft forever preferred_lft forever
9: veth06a070e@if8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master dockerApps state UP group default
link/ether 6e:c8:0c:df:54:67 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet6 fe80::6cc8:cff:fedf:5467/64 scope link
I have two network interfaces virtually installed using Proxmox. One is for normal communication to the LAN/WAN and one is reserved for future use for Flows.
The rest of the interfaces have to be from Qradar/CentOS.
yum update && yum -y upgrade did nothing.
Can anybody help me? It's a bit frustrating that I can't update Qradar. Not with auto update and not with manual FixPack installation...
------------------------------
M. Offermann
------------------------------