Installs and Upgrades 101

Installs and Upgrades 101 QRadar Support related to installs, upgrades and working with managed hosts in a QRadar deployment.

QRadar Software List

Upgrade Checklist

Support Lifecycle

QRadar Architecture and Installation Resources

IBM® QRadar® architecture supports deployments of varying sizes and topologies, from a single host deployment, where all the software components run on a single system, to multiple hosts, where appliances such as Event Collectors, and Flow Collectors, Data Nodes, an App Host, Event Processors, and Flow Processors, have specific roles.

QRadar product family

QRadar architecture overview

QRadar Achitecture and Deployment Guide

QRadar distributed deployments

QRadar Installation Guide

Installling an App Host

License Information FAQ

QRadar on Cloud documentation

Managed Host Resources

A distributed IBM Security QRadar deployment is comprised of a Console and a number of managed hosts. Managed hosts are non-Console QRadar appliances that provide greater flexibility over data collection and event and flow processing.

Adding a managed host

Unable to add Managed Host to Deployment

Removing a managed host

Firewalls & Port considerations

Replacing a Console appliance using a new IP address or hostname

Replacing a Console appliance using the same IP address or hostname

Replacing a QRadar Managed Host appliance in a deployment (16xx, 17xx, 18xx)

Migrating from an App Node to an App Host

SFS and ISO Guides

Find upgrade guides for supported versions.

Fix Packs (SFS Files)

The most common software update scenario for administrators is to install a QRadar fix pack update. Fix packs resolve known issues and normally do not contain features or major operating system changes. Fix Packs update the F in IBM’s V.R.M.F software deliveries).

Required Reading

Fix Pack Notes

Run drq health checks before you begin any upgrade. QRadar Support instructs administrators to stay updated and apply Fix Packs when available. Fix Packs are typically released on 8 to 12 week cycles for supported software versions as indicated by the QRadar Software Lifecycle.

Upgrades (ISO Files)

Upgrades are major release updates, delivered as an ISO file to add new features, operating system (OS) updates, and resolve issues as part of the installation. An upgrade generally increment the modification (M) numeric indicator for IBM V.R.M software deliveries).

Required Reading

Upgrade notes

Administrators might be required during major updates to install an ISO, then apply a Fix Pack to update a deployment to the latest software version. IBM does not release ISO files with every Fix Pack version. Administrators should review the Upgrade Guide to determine if VMs meet suggested memory requirements as new features can consume more resources over time.

For current and past Known Issues with QRadar, see the product defect list.

Known Issues

Explore QRadar 101

QRadar home

Return to the QRadar 101 homepage

Applications

Learn about QRadar apps

Deploy changes

Learn about deploying changes to QRadar

Disk Space

Learn about managing QRadar disk space

Technotes

Browse a directory of our technical notes

Software

Download software for QRadar

Support Assistance

Read our support policies

Support tools

Browse CLI tools to help with troubleshooting

WinCollect

Learn about WinCollect 7 and 10

Known issues

See current and fixed issues with QRadar

“IBM prides itself on delivering world class software support with highly skilled, customer-focused people. ”

Return to 101 home

Contact Support

Find your regional support contact

Give Feedback