QRadar EDR Agent system requirements

To ensure that IBM® Security QRadar® EDR QRadar EDR Agent works correctly, you must meet or exceed the system requirements.

The QRadar EDR Agent supports the following platforms.

Table 1. QRadar EDR Agent supported platforms
Agent version Operating system version Processor
Linux® 0.80.1

All minor versions of the following operating versions are supported if no major kernel changes occur between them:

  • Amazon Linux 2
  • CentOS 6, 7, 8
  • CentOS Stream 8, 9
  • Debian 8, 9, 10, 11, 12
  • OpenSUSE Leap 15
  • Oracle Linux 7, 8, 9
  • Red Hat® Enterprise Linux 6, 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12, 15
  • Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS
Important:
  • The QRadar EDR Agent is not supported on CentOS 6, CentOS 7, Debian 8, Debian 9, Debian 10, Red Hat Enterprise Linux 6, or Red Hat Enterprise Linux 7 when they are using UEFI Secure Boot.
  • CentOS 6 and Red Hat Enterprise Linux 6 require Linux agent 0.70.0 or later.
 Intel or AMD 64-bit
macOS 1.0.0 macOS Monterey, Ventura, and Sonoma 14.0 Intel and Apple Silicon
Windows 3.10
  • Windows client 7 (SP1), 8, 8.1, 10, 10-POS, 11 (Fully updated)
  • Windows server 2008 R2 (SP2), 2012 R2, 2016, 2019 (Fully updated)
 Intel or AMD 32 and 64-bit
Important: Deploying QRadar EDR alongside existing anti-virus solutions might cause technical issues. The configuration must be thoroughly tested before production.