IBM Support

QRadar: How to find IP addresses for applications

How To


Summary

This article documents a command you can use to list the IP addresses for all your QRadar apps.

Steps

Use Docker to list your container IP addresses.
  1. SSH into your QRadar console.
  2. Optional. SSH into your App Host.
  3. Enter the following command: 
    docker ps -q | xargs -n 1 docker inspect --format '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}} {{ .Name }}' | sed 's/ \// /'

    Result
    Example output: 
    169.254.3.3 qapp-2704-QPaDCGUZ
169.254.3.2 qapp-2702-zhE60lqZ
    QRadar applications use the 169.254.3.x IP address range. If you experience issues, such as applications loading to a blank page in the QRadar UI, check your IP tables rules or confirm that the other devices in the network do not conflict with application IP addresses.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
08 December 2022

UID

ibm16845978

Page Feedback