IBM Support

QRadar: Static route configuration

Question & Answer


Question

How can you change the QRadar static IP address rule route configuration?

Answer

IBM QRadar Support does not support static IP address route configurations but can assist with questions about its use.
Note:
  • Adding static routes to HA pairs can break HA. Do not add a static route to HA appliances.
  • Patching an appliance removes static routes. Before patching a system, back up your static route configuration.

To add persistent static IP rules in RHEL(6 and 7), you are updating the actual route configuration file for each network interface. When configuring this file you need to add your default gateway, Static IP address, and network interface configuration file name. Listed are examples of the command:

For 7.2 (RHEL6):

echo "10.0.1.0/24 via 10.0.0.33" >> /etc/sysconfig/network-scripts/route-<interfacename>

After the change is performed, restart the network service with the following command:

service network restart

For 7.3 (RHEL7):

echo "10.0.1.0/24 via 10.0.0.33 dev <interfacename>" >> /etc/sysconfig/network-scripts/route-<interfacename>

After the change is performed, restart the network service with the following command:

systemctl restart network


Note: Replace the example IP addresses with your own gateway IP and static IP addresses. Provide the correct interface names in the commands.

For more information on creating static route configurations, see:

 

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2.8;7.3.3;7.4.1;7.4.2;7.4.3"}]

Document Information

Modified date:
29 June 2021

UID

swg21995165