Changing the Network Configuration
A pretty common mistake when dealing with QRadar environments is wrongly updating the network configuration directly on the Operational System. As everyone know, the QRadar runs on a customized RedHat distribution, but it doesn’t mean that we could make the changes directly on the OS. To change the network configuration (IP, Hostname, DNS server, Network Mask, etc) we should use the appropriated QRadar script for it, and it is even easier than changing directly on the OS. The following procedure can be done to change the network configuration. Please note that while the configuration is done, the QRadar services will be down and after the configuration a reboot will be necessary. Also note that the procedure should be done in the server terminal, and not through SSH.
Changing the Network Configuration:
- Open the QRadar terminal (It should be DIRECTLY on the server, not through SSH).
- Run the following command:
[root@qradarlab]# qchange_netsetup - Read the terms and press Y and enter to continue
- Wait while the services are stopped
- Proceed with the network configuration and change the necessary configuration
- After clicking in FINISH, the server will be rebooted.
With this procedure, all the QRadar configuration files will be changed with the new network configuration and also the OS will be updated. So with just one script we change all the necessary configuration.
QRadar Insights 
February 20, 2014 at 2:04 pm
Ricardo it’s possible to SSH to the appliance and execute “qchange_netsetup”. This needs to be done from the IMM so you don’t have to be on site to change the device configuration.
October 2, 2014 at 7:36 am
The issue with “qchange_netsetup” seems to be the easiest part. Could someone describe the procedure how must be set the Deployment Editor (in case that you have distributed environment even all-in-one appliance)? Thank you…M.