IBM Support

QRadar: How to export the staging network hierarchy information using CLI

How To


Summary

This article contains a step by step process on how to export the staging network hierarchy information from QRadar with the Command Line Interface (CLI).

Steps

How to export the staging network hierarchy information.
  1. Log in to the QRadar Console as the root user.
  2. Create a directory to store the staging network hierarchy information.
    mkdir -pv /store/ibm_support
    mkdir: created directory ‘/store/ibm_support’
  3. Type the following command to export the staging network hierarchy information.
    psql -U qradar -c "select * from staging.network" > /store/ibm_support/staged_networks.txt
  4. Review the newly created /store/ibm_support/staged_networks.txt file.
    cat /store/ibm_support/staged_networks.txt
     
     id | network_id |                            name                             | domain_id |      cidr      |      descr      | location | country
    ----+------------+-------------------------------------------------------------+-----------+----------------+-----------------+----------+---------
      1 |          2 | other.other                                                 |         0 | 0.0.0.0/0      | other           |          |
      2 |          3 | Net-10-172-192.Net_10_0_0_0                                 |         0 | 10.0.0.0/8     | Default Network |          |
      3 |          4 | Net-10-172-192.Net_172_16_0_0                               |         0 | 172.16.0.0/12  | Default Network |          |
      4 |          5 | Net-10-172-192.Net_192_168_0_0                              |         0 | 192.168.0.0/16 | Default Network |          |
      5 |          6 | DMZ.Internal                                                |         0 | 0.0.0.1/32     | Default Network |          |
      6 |          7 | DMZ.External                                                |         0 | 0.0.0.2/32     | Default Network |          |
      7 |          8 | VPN_Addresses_Space.VPN_Addresses_Space                     |         0 | 0.0.0.3/32     | Default Network |          |
      8 |          9 | Proxy_Servers.Proxy_Servers                                 |         0 | 0.0.0.4/32     | Default Network |          |
      9 |         10 | NAT_Ranges.NAT_Ranges                                       |         0 | 0.0.0.5/32     | Default Network |          |
     10 |         12 | Server_Network.Server_Network                               |         0 | 0.0.0.7/32     | Default Network |          |
     11 |         16 | VoIP_Networks.VoIP_Networks                                 |         0 | 0.0.0.11/32    | Default Network |          |
     12 |         17 | Regulatory_Compliance_Servers.Regulatory_Compliance_Servers |         0 | 0.0.0.12/32    | Default Network |          |
     13 |         20 | Wireless_Networks.all                                       |         0 | 0.0.0.14/32    |                 |          |
    (13 rows)
    
Result:
The staging network hierarchy information is output to the staged_network.txt file.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
29 June 2023

UID

ibm17007771