Installing and configuring Machine Learning in Multitenancy
With 3.6.0 and later, you can install and configure Machine Learning to work in a multitenant environment in QRadar® 7.4.3 Fix Pack 6 and later.
Before you begin
You must complete the steps outlined in the table on the QRadar configurations for setting up multitenancy in UBA page on a system with QRadar 7.4.3 Fix Pack 6 and later.
Before attempting to install and configure any Machine
Learning instance be sure
you have an Admin instance of UBA installed by completing the following steps Installing the User Behavior Analytics app.
Attention: Do not install Machine
Learning (ML app) on the Admin or shared
instance.
About this task
The following procedure must be completed by the QRadar Admin or the MSSP admin.
Important: For QRadar version 7.4.3, the
container size and the amount of memory you select for the first Machine
Learning instance that you
configure will apply to all tenant instances. To change the container size, you would need to remove
all running Machine
Learningg
instances and install again to be able to configure a different container size. For QRadar 7.5.0, the first Machine
Learning instance created
will become the lowest available container size allowed for additional tenants. Additional tenants
will be allowed to specify a container size greater than the first Machine
Learning instance.
Procedure
What to do next
Repeat these steps for instances of UBA that you want to install Machine Learning on.