Installs and Upgrades 101 QRadar Support related to installs, upgrades and working with managed hosts in a QRadar deployment. QRadar Software List Upgrade Checklist Support Lifecycle

QRadar Architecture and Installation Resources

IBM® QRadar® architecture supports deployments of varying sizes and topologies, from a single host deployment, where all the software components run on a single system, to multiple hosts, where appliances such as Event Collectors, and Flow Collectors, Data Nodes, an App Host, Event Processors, and Flow Processors, have specific roles.
QRadar product family QRadar architecture overview QRadar Achitecture and Deployment Guide QRadar distributed deployments QRadar Installation Guide Installling an App Host License Information FAQ QRadar on Cloud documentation

Managed Host Resources

A distributed IBM Security QRadar deployment is comprised of a Console and a number of managed hosts. Managed hosts are non-Console QRadar appliances that provide greater flexibility over data collection and event and flow processing.
Adding a managed host Unable to add Managed Host to Deployment Removing a managed host Removing a managed host Firewalls & Port considerations Replacing a Console appliance using a new IP address or hostname Replacing a Console appliance using the same IP address or hostname Replacing a QRadar Managed Host appliance in a deployment (16xx, 17xx, 18xx) Migrating from an App Node to an App Host

SFS and ISO Guides

Find upgrade guides for supported versions.

Fix Packs (SFS Files)

The most common software update scenario for administrators is to install a QRadar fix pack update. Fix packs resolve known issues and normally do not contain features or major operating system changes. Fix Packs update the F in IBM’s V.R.M.F software deliveries).

Required Reading

Fix Pack Notes

Run drq health checks before you begin any upgrade. QRadar Support instructs administrators to stay updated and apply Fix Packs when available. Fix Packs are typically released on 8 to 12 week cycles for supported software versions as indicated by the QRadar Software Lifecycle.

Upgrades (ISO Files)

Upgrades are major release updates, delivered as an ISO file to add new features, operating system (OS) updates, and resolve issues as part of the installation. An upgrade generally increment the modification (M) numeric indicator for IBM V.R.M software deliveries).

Required Reading

Upgrade notes

Administrators might be required during major updates to install an ISO, then apply a Fix Pack to update a deployment to the latest software version. IBM does not release ISO files with every Fix Pack version. Administrators should review the Upgrade Guide to determine if VMs meet suggested memory requirements as new features can consume more resources over time.

For current and past Known Issues with QRadar, see the product defect list. Known Issues

Top Videos

QRadar: How to install an All-In-One (AIO) deployment

QRadar : How to install or update DSMs and Protocols in IBM QRadar?

QRadar: How to manually install the QRadar weekly auto update bundle

QRadar Deployment Architecture Part One

QRadar Deployment Architecture Part Two

Explore QRadar 101

QRadar home

Return to the QRadar 101 homepage


Learn about QRadar apps

Deploy changes

Learn about deploying changes to QRadar

Disk Space

Learn about managing QRadar disk space


Browse a directory of our technical notes


Download software for QRadar

Support Assistance

Read our support policies

Support tools

Browse CLI tools to help with troubleshooting


Learn about WinCollect 7 and 10

Known issues

See current and fixed issues with QRadar

IBM prides itself on delivering world class software support with highly skilled, customer-focused people.

Return to 101 home
Contact Support Find your regional support contact

Give Feedback