IBM Security QRadar

 View Only
  • 1.  Convert Appliance 1604(EC+EP) to AppHost

    Posted Mon October 14, 2019 06:36 AM
    One of our Appliance 1604 is unused, so we are planning to convert this to AppHost, anyone know how to convert this appliance to AppHost?

    ------------------------------
    Dastagirsab Mulla
    ------------------------------


  • 2.  RE: Convert Appliance 1604(EC+EP) to AppHost

    Posted Tue October 15, 2019 09:48 AM
    Edited by Anthony Gayadeen Tue October 15, 2019 09:49 AM

    Hi Dastagirsab,

    first, you will need a "console" access to the server to perform this task, either remote or local.

    Also, you must verify that the ISO in the /recovery is version 7.3.2 and +. A good way of checking this is by looking in the folder. If you see /recovery/732/<filename>.iso, then you're ok to follow the steps below.
    Otherwise, you'll need to change this ISO with a 7.3.2 copy, and this is because "AppHost" only exists for this version and up. Before they were called appnode. Here are some steps from another post to replace the recovery iso:
    https://community.ibm.com/community/user/security/communities/community-home/digestviewer/viewthread?MessageKey=c95ead6d-11c9-479b-9089-151438732ba2


    Solution if your recovery ISO is 7.3.2 + :
    1. Connect to the IMM and start a Remote Console or plug a monitor and keyboard to the back of your server.
    2. Reboot the server and select "Factory Re-Install" in the boot options.
    3. Follow the installation instructions to configure an AppHost. https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_adm_install_apphost.html

    Note: the same ISO is used to install the Console, EP, FP, Apphost, EC, ...



    ------------------------------
    Anthony Gayadeen, Videotron Ltd
    Montreal QC
    ------------------------------



  • 3.  RE: Convert Appliance 1604(EC+EP) to AppHost

    Posted Tue October 15, 2019 08:26 PM
    Hi,
    I forgot to mention that you can always mount the ISO on a USB key and boot the server from it.

    So, here's what you should see when you boot from version 7.3.2 and + iso.

    • After installing Redhat and accepting the licences conditions, you will find this screen, so select App Host appliance:
    AppHost_Installation_Menu

    • Then, you will see this confirmation menu for your apphost, select next to continue:
    AppHost_Installation_Menu2
    • Finally, follow the same procedure than your other managed host.

    Good Luck!

    ------------------------------
    Anthony Gayadeen, Videotron Ltd
    Montreal QC
    ------------------------------



  • 4.  RE: Convert Appliance 1604(EC+EP) to AppHost

    Posted Wed October 16, 2019 01:41 AM
    Hi Anthony,

    Thank you very much for this reply. I thought there may have some other ways to change appliance type without rebuild.

    Regards
    Dastagirsab Mulla

    ------------------------------
    Dastagirsab Mulla
    ------------------------------



  • 5.  RE: Convert Appliance 1604(EC+EP) to AppHost

    Posted Wed October 16, 2019 09:51 AM
    Hi Dastagirsab,
    to be honest, I'm sure there is, although it might take you more time changing all the config files then re-installing, it's why we never bothered doing that. Also, I guarantee you that you will not be supported by IBM if you play in these server config ;)
    When you have remote access to the server console port, it takes 45min to install the apphost. In reality, i took me 10min last night, because the installation is mostly automatic, so you'll wait most of the time. At the end, you have a clean install with no old processes and data wasting your server resources.
    This is my advice, but someone might have another solution for your need.

    Regards,

    ------------------------------
    Anthony Gayadeen, Videotron Ltd
    Montreal QC
    ------------------------------