Prerequisites for installing QRadar on your hardware

Before you install the Red Hat® Enterprise Linux® (RHEL) operating system on your hardware, ensure that your system meets the system requirements.

QRadar and RHEL version compatibility

The following table describes the version of Red Hat Enterprise Linux used with the IBM® QRadar® version.

Table 1. Red Hat version
IBM QRadar version Red Hat Enterprise Linux version
IBM QRadar 7.4.0 Red Hat Enterprise Linux V7.6 64-bit
IBM QRadar 7.4.1 Red Hat Enterprise Linux V7.7 64-bit
IBM QRadar 7.4.2 Red Hat Enterprise Linux V7.7 64-bit
IBM QRadar 7.4.3 Red Hat Enterprise Linux V7.7 64-bit

The following table describes the system requirements:

Table 2. System requirements for RHEL installations on your own appliance

Requirement

Description

KickStart disks

Not supported

Network Time Protocol (NTP) package

Optional

If you want to use NTP as your time server, ensure that you install the NTP package.

Firewall configuration

WWW (http, https) enabled

SSH-enabled

Hardware

See the tables below for memory, processor, and storage requirements.

Memory and CPU requirements

If you use hardware not provided by IBM QRadar, ensure that your appliance meets or exceeds the specifications for memory and CPU of the corresponding QRadar appliance. For information about the specifications of the QRadar appliances, see IBM QRadar Hardware Guide.
Important: You can change the memory or the CPU of your appliance by shutting down the appliance and making the changes. When you restart the appliance the system detects the changes and adjusts the performance related configuration. You must maintain the minimum requirements.

Storage requirements

Your appliance must have at least 256 GB of storage available.

The following table shows the storage requirements for installing QRadar on your hardware.

Note: The minimum required storage size will vary, based on factors such as event size, events per second (EPS), and retention requirements.
Table 3. Minimum storage requirements for appliances when you use the virtual or software installation option.
System classification Appliance information IOPS Data transfer rate (MB/s)
Minimum performance Supports XX05 licensing 800 500
Medium performance Supports XX29 licensing 1200 1000
High Performance Supports XX48 licensing 10,000 2000
Small All-in-One or 1600 Less than 500 EPS 300 300
Event/Flow Collectors Events and flows 300 300