IBM Security QRadar

 View Only
  • 1.  QRadar installed on Azure

    Posted Thu October 06, 2022 12:30 PM
    Hello,
    We have installed QRadar instance on Azure using the QRadar image.
    The installation was successful. However, there are multiple issues.
    1. Installing auto updates are failing, however, the download is successful.
    2. The instance was installed in August. I don't see any information in /var/logs/qradar.log 

    Is there a fault with the installation?
    Please advise.

    Thanks in advance.
    Siddarth

    ------------------------------
    --
    Thanks and Best Regards,
    Siddarth
    ------------------------------


  • 2.  RE: QRadar installed on Azure

    IBM Champion
    Posted Sat November 12, 2022 07:44 AM
    Hello @Siddarth Talupula,

    Regarding your autoupdate problem it depends on the version of QRadar you deployed.

    If you are on auto update version 9.9 or earlier, you might experience auto update download errors. 

    Just check your version with this command :

    /opt/qradar/bin/UpdateConfs.pl -v

    Case 1 : auto update version 9.9 or earlier must update to 9.11 or later using the AUProxyFP-9.11 from IBM Fix Central

    Case 2 : auto update version 9.10 need to replace their au-cert file with a new version for updates to download

    Check here for the detailed procedure :
    QRadar: Common issues and troubleshooting for auto update version 9.11 (ibm.com)

    Hope this help.

    Regards,
    Zoldax







    ------------------------------
    @zoldax

    https://www.youracclaim.com/users/pascal-weber.029e134d/badges
    ------------------------------