Changing the Network Configuration

Posted on

A pretty common mistake when dealing with QRadar environments is wrongly updating the network configuration directly on the Operational System. As everyone know, the QRadar runs on a customized RedHat distribution, but it doesn’t mean that we could make the changes directly on the OS. To change the network configuration (IP, Hostname, DNS server, Network Mask, etc) we should use the appropriated QRadar script for it, and it is even easier than changing directly on the OS. The following procedure can be done to change the network configuration. Please note that while the configuration is done, the QRadar services will be down and after the configuration a reboot will be necessary. Also note that the procedure should be done in the server terminal, and not through SSH.

Changing the Network Configuration:

  • Open the QRadar terminal (It should be DIRECTLY on the server, not through SSH).
  • Run the following command:
    [root@qradarlab]# qchange_netsetup
  • Read the terms and press Y and enter to continue
  • Wait while the services are stopped
  • Proceed with the network configuration and change the necessary configuration
  • After clicking in FINISH, the server will be rebooted.

With this procedure, all the QRadar configuration files will be changed with the new network configuration and also the OS will be updated. So with just one script we change all the necessary configuration.

Advertisements

2 thoughts on “Changing the Network Configuration

    Tomasz Stankiewicz said:
    February 20, 2014 at 2:04 pm

    Ricardo it’s possible to SSH to the appliance and execute “qchange_netsetup”. This needs to be done from the IMM so you don’t have to be on site to change the device configuration.

    charkh said:
    October 2, 2014 at 7:36 am

    The issue with “qchange_netsetup” seems to be the easiest part. Could someone describe the procedure how must be set the Deployment Editor (in case that you have distributed environment even all-in-one appliance)? Thank you…M.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s