IBM Support

QRadar: Collecting information on all systems in the deployment with deployment_info.sh

Troubleshooting


Problem

How can I get general information on all systems in the QRadar environment?

Resolving The Problem

This script collects all information about all systems in the deployment, including disk space used, hardware, appliance type, and serial number within a CSV file. This output gives you a report on which appliances might have an issue with low disk space in /store. If /store is greater than 95%, then services stop.
  1. SSH to the QRadar console and login as the root user.
  2. Run the following command. 
    /opt/qradar/support/deployment_info.sh
    For example, 
    /opt/qradar/support/deployment_info.sh INFO: Gathering deployment information. This may take a while...
CREATED: qradar_deployment_info-10-09-2019.csv
The result is a .CSV file that contains information on the deployment, which includes the following. Hostnames, IP addresses, appliance types, hardware information, storage information, Event Per Second information, and Flows Per Second information.

Alternately: You can run the deployment_info.sh script with the -OS option to output a table to the CLI.
  1. SSH to the QRadar console and login as the root user.
  2. Run the following command. 
    /opt/qradar/support/deployment_info.sh -OS
    For example, 
    /opt/qradar/support/deployment_info.sh -OS
INFO: Gathering deployment information. This may take a while...
    Hostname   IP              HA Status  HA Type  Appliance  Hardware                  Hardware Type  /store Size (GB)  /store Used (GB)  /store Available (GB)  /store % Used
aconsole  xxx.xxx.xxx.xxx  N/A        N/A      3199        VMware Virtual Platform  xx24           180               75                104                    42%
aec3      xxx.xxx.xxx.xxx  N/A        N/A      4000        VMware Virtual Platform  xx24           219               16                202                    8%
aep3      xxx.xxx.xxx.xxx  N/A        N/A      1699        VMware Virtual Platform  xx24           219               24                202                    13%


Results
The output of this command helps assess deployment information.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"Troubleshooting","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
13 July 2023

UID

ibm11085673

Page Feedback