IBM Security QRadar SOAR

 View Only
  • 1.  SOAR resilient DR question

    Posted Tue June 01, 2021 01:01 PM
    According to IBM documentation, when upgrading the DR system, the first step is to disable DR.
    The instructions say to manually disable and stop the Resilient platform by running the commands to disable and stop resilient on the master appliance.

    Does this actually stop the current, live instance of resilient?

    On the master appliance, manually disable and stop the Resilient platform by running the following commands:
    sudo systemctl disable resilient
    sudo systemctl stop resilient


    ------------------------------
    Tim Gray
    ------------------------------


  • 2.  RE: SOAR resilient DR question

    Posted Wed June 02, 2021 02:16 AM
    Hi Tim,

    Yes it does. Prior to stopping the service SOAR is only running on the master. Once stopped you can proceed with the upgrade of the master and the receiver. Finally, enable DR and you're back up and running.

    https://www.ibm.com/docs/en/rsoa-and-rp/41?topic=guide-upgrading-dr

    ------------------------------
    BEN WILLIAMS
    ------------------------------