When you upgrade IBM®
QRadar Network Packet Capture, both the QRadar Network Packet
Capture software and Red Hat® Enterprise Linux® operating system are upgraded. The
configuration files and packet capture files remain unchanged.
Before you begin
Ensure that the following requirements are met:
About this task
If your deployment includes QRadar Network Packet
Capture appliances that
are in a stacked or grouped configuration, remove them from the group or stack before you upgrade.
After all your appliances are upgraded to the same version, you can re-create the group or stack. By
upgrading each appliance individually and then rebuilding the stack and group configuration, the
packet capture data is preserved during the upgrade process.
For more information, see Stacked appliances and Grouped appliances.
Procedure
-
Download the .iso image from IBM Fix Central (www.ibm.com/support/fixcentral).
The
.iso file is named
x.x.x-QRadar-NETPCAP-Upgrade-nnnn.iso, where:
x.x.x
is the release version.
nnnn
is a four-digit number that is allocated to the build.
For example, if you are upgrading to QRadar Network Packet
Capture 7.4.3 Fix Pack
2, select 7.4.3-QRadar-NETPCAP-Upgrade-1304.
-
To use IMM2 to mount the .iso image, follow these steps:
-
Log in to the IMM2 management module.
You must access the IMM2 management module using Active X with Internet Explorer, or a browser
that supports Java™.
-
Click Remote Control.
-
To start the remote control session, click Active X if you are using
Internet Explorer, or click Java for all other browsers.
-
Click Start Remote Control in Single User Mode to start the
session.
-
On the Virtual Media menu, click
Activate.
-
On the Virtual Media menu, click Select Devices to
Mount.
-
In the Select Devices to Mount window, click Add
Image.
-
Locate the .iso image that you want to use, and click
Open.
-
Select the Mapped check box next to the drive to mount, and click
Mount Selected.
To watch a video tutorial about mounting an .iso using the IMM2 management
module, see QRadar: Mounting ISOs Using IMM
(https://www-01.ibm.com/support/docview.wss?uid=swg21974632).
-
Alternatively, you can copy the .iso to a bootable USB flash drive.
-
Restart the appliance.
-
On the Boot Devices Manager window, select the
Upgrade option to start the upgrade process.
Warning: The upgrade process ensures that your configuration files and captured data
remain intact. Choosing any other option might reset your configuration and delete your capture
data.
-
After the upgrade is completed, restart the appliance.
Results
QRadar Network Packet
Capture is
upgraded.