IBM Support

QRadar: Restoring a configuration results in static routes being removed

Question & Answer


Question

Why are the static routes being deleted when I run a configuration restore?

Answer

Before you begin:
Static routes are considered a customization for Red Hat Enterprise Linux® (RHEL). QRadar® Support does not troubleshoot static IP address route configurations, but can assist with questions where static routes can break functionality.
Examples:
  • Adding static routes to HA pairs can break HA. Do not add a static route to HA appliances.
  • Static routes do not persist during upgrades where the RHEL operating system is updated on the QRadar appliance.
Configuration restores are performed either when recovering a system or to recover something such as a rule that was accidentally deleted. When administrators run a configuration restore, it calls the VPN clean job. The result is that custom static routes are removed when the restore is completed.
To resolve this issue
Before running a configuration restore, back up all your static routes added to the Console or managed hosts.
Administrators need to re-add their custom static routes to all appliances that are missing their custom static routes.

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.3.2;7.3.3;7.4.0;7.4.1"}]

Document Information

Modified date:
22 December 2020

UID

ibm16369239