Unlocking locked user accounts

New in 7.4.1 A user with root access can unlock user accounts that are locked out of IBM® QRadar®.

About this task

A user account can be locked out of QRadar if there are too many failed login attempts for that account.

Procedure

  1. Using SSH, log in to your system as the root user.
  2. Unlock specific user accounts or all user accounts.
    • Unlock specific user accounts by typing the following command:
      /opt/qradar/bin/runjava.sh com.ibm.si.security_model.authentication.AuthenticationLockoutCommandLineTool --remove-account <user_account1> <user_account2> <user_account3>
    • Unlock all user accounts by typing the following command:
      /opt/qradar/bin/runjava.sh com.ibm.si.security_model.authentication.AuthenticationLockoutCommandLineTool --remove-all-accounts