IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  QRadar Installation on Azure VM

    Posted Tue October 10, 2023 12:21 PM

    Hello,

    We are in the process of installing QRadar on Azure (RHEL VM in Azure). We are not building QRadar BYOL rather regular installation.

    Despite of repeated reboots, we are encountering this error. Can you please advise.

    Installing new kernel RPM
    Loaded plugins: langpacks, product-id, search-disabled-repos, yum_rhui_plugin
    Package kernel-3.10.0-1160.6.1.el7.x86_64 already installed and latest version
    Checking that SELinux is disabled...
    OK: SELinux is disabled.
    ** The kernel has been updated from 3.10.0-1160.6.1.el7.x86_64 to 3.10.0-1062.52.2.el7.x86_64, but a reboot has not been performed.
    A reboot is required for changes to take effect.  Remount ISO and re-run setup after rebooting.
    Press enter to close screen
    [screen is terminating]
    [root@RHELinuxVM /]# uptime
     16:11:15 up 10 min,  1 user,  load average: 0.03, 0.07, 0.07
    --
    Thanks,
    Siddarth


    ------------------------------
    --
    Thanks and Best Regards,
    Siddarth
    ------------------------------


  • 2.  RE: QRadar Installation on Azure VM

    Posted Thu October 12, 2023 08:28 AM

    I believe that you must use the BYOL for the initial install. After that you can upgrade QRadar to newer versions with the standard SFS file. The documentation seems to state that you must use the BYOL to do the initial install.

    Reference: https://www.ibm.com/docs/en/qsip/7.5?topic=images-configuring-750-virtual-appliance-microsoft-azure

    The general process is:
    1. Install the BYOL version of QRadar from the Azure Marketplace. 
    2. Go to Fix Central and download the latest SFS version.
    3. Mount and install the SFS to upgrade the QRadar version to the latest. 

    Hope this helps, but I'm pretty sure this is the only path to get QRadar installed on Azure is to use the BYOL license.



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message


Related Content