Installing QRadar on a virtual machine

After you create your virtual machine, you must install the IBM® QRadar® software on the virtual machine.

Before you begin

Create a virtual machine. For more information, see Creating your virtual machine.

Determine if you need to do an appliance installation or a software installation. For more information about appliance installations and software installations, see Virtual appliance installations.

For a software installation, you must install Red Hat® Enterprise Linux® (RHEL) before you install QRadar. For more information about installing RHEL for QRadar, see Installing RHEL on your system.

Procedure

  1. Log in to the virtual machine by typing root for the user name.

    The user name is case-sensitive.

  2. Accept the End User License Agreement.
  3. Select the appliance type:
    • Non-Software Appliance for an appliance installation.
    • Software Appliance for a software installation.
  4. Select the appliance assignment, and then select Next.
  5. If you selected an appliance for high-availability (HA), select whether the appliance is a console.
  6. For the type of setup, select Normal Setup (default) or HA Recovery Setup, and set up the time.
  7. If you selected HA Recovery Setup, enter the cluster virtual IP address.
  8. Select the Internet Protocol version:
    • Select ipv4 or ipv6.
  9. If you selected ipv6, select manual or auto for the Configuration type.
  10. Select the bonded interface setup, if required.
  11. Select the management interface.
  12. In the wizard, enter a fully qualified domain name in the Hostname field.
    Important:
    • The hostname must not contain only numbers.
    • The console and managed host (MH) cannot have the same hostname.
  13. In the IP address field, enter a static IP address, or use the assigned IP address.
    Important: If you are configuring this host as a primary host for a high availability (HA) cluster, and you selected Yes for auto-configure, you must record the automatically generated IP address. The generated IP address is entered during HA configuration.

    For more information, see the IBM Security QRadar High Availability Guide.

  14. If you do not have an email server, enter localhost in the Email server name field.
  15. Enter root and admin passwords that meet the following criteria:
    • Contains at least 5 characters
    • Contains no spaces
    • Can include the following special characters: @, #, ^, and *.
  16. Click Finish.
  17. Follow the instructions in the installation wizard to complete the installation.

    The installation process might take several minutes. When the installation is complete, if you are installing a QRadar Console, proceed to step 18. If you are installing a managed host, proceed to Adding your virtual appliance to your deployment.

  18. Apply your license key.
    1. Log in to QRadar:

      https://QRadar_IP_Address

    2. Click Login.
    3. On the navigation menu ( Navigation menu icon ), click Admin.
    4. In the navigation pane, click System Configuration.
    5. Click the System and License Management icon.
    6. From the Display list box, select Licenses, and upload your license key.
    7. Select the unallocated license and click Allocate System to License.
    8. From the list of systems, select a system, and click Allocate System to License.