IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Upgrade QRadar SIEM without stopping service

    Posted Wed July 13, 2022 10:30 AM

    Are there any way to upgrade QRadar SIEM without stopping service?

    Customer has one license and use it on Production environment.

    They want to upgrade QRadar SIEM, but it impacts to their business if service will stop. They have to visually confirm alerts and logs during upgrading.

    (They use it on redundant configuration server)



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Upgrade QRadar SIEM without stopping service

    Posted Wed July 13, 2022 12:42 PM

    Well, the IBM definition of "High Availibility" seems to differ from everyone's. We also have a HA production server and could not find a way to upgrade our servers without downtime.



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: Upgrade QRadar SIEM without stopping service

    Posted Wed July 13, 2022 11:51 PM

    Thank you for your comment.

    I see.



    #QRadar
    #Support
    #SupportMigration


  • 4.  RE: Upgrade QRadar SIEM without stopping service

    Posted Wed July 13, 2022 11:51 PM

    Thank you for your comment.

    I see.



    #QRadar
    #Support
    #SupportMigration


  • 5.  RE: Upgrade QRadar SIEM without stopping service

    Posted Thu July 14, 2022 01:45 AM

    I don't think without downtime we can upgrade the system.



    #QRadar
    #Support
    #SupportMigration


  • 6.  RE: Upgrade QRadar SIEM without stopping service

    Posted Fri July 15, 2022 06:09 AM

    Hi,

    That's an interesting wishful thinking :) One way to minimize downtime would be to think about establishing an HA instance for the relevant component..

    Regards,

    Ralph



    #QRadar
    #Support
    #SupportMigration