IBM Support

QRadar: How to find DSM or Protocol rpm packages that are not available in the IBM Fix Central website?

Question & Answer


Question

 How to obtain DSM or Protocol rpm packages that are not available in the IBM Fix Central website?

Answer

Actions such as restore of config backup or accidental removal of rpm packages for DSMs or protocols can affect the QRadar deployment because of non-availability of packages.

In such situations, you can access and download packages from IBM Fix Central and install the package.
However, there are certain packages, such as PROTOCOL-TCPSyslog-<version>-<buildNo>.noarch.rpm, that are sometimes not available on IBM Fix Central. In such scenarios, you can get the rpm package by mounting the SFS or ISO install package.

For instructions to mount an SFS or ISO package, read the release notes for that version available on IBM Fix Central or on QRadar101 
If you mount SFS upgrade package, DSM and Protocol rpms are placed in the following path:
/media/updates/repo
If you mount an ISO package, DSM and Protocol rpms are placed in the following path:
/media/cdrom/post/dsmrpms

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"},{"code":"a8m0z000000cwtNAAQ","label":"Deployment"},{"code":"a8m0z000000cwszAAA","label":"Install"},{"code":"a8m0z000000cwt0AAA","label":"Log Source"}],"ARM Case Number":"TS016414872","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Document Information

Modified date:
26 July 2024

UID

ibm17158492