Upgrading the Investigation Assistant app

You must upgrade to new versions of the IBM QRadar Investigation Assistant app to take advantage of the new capabilities, defect fixes, and upgraded workflows. Use the Extensions Management tool in IBM QRadar to upgrade your app, or use the IBM QRadar Hub app to upgrade. You must be an administrator to upgrade to new versions of the app.

Before you begin

Note: You must have IBM ID to access the App Exchange.

Procedure

  1. Choose one of the following methods to download the app:
    1. If the IBM QRadar Hub app is configured on QRadar, see Downloading apps with the IBM QRadar Hub app to install Investigation Assistant.
    2. If the IBM QRadar Hub app is not configured, download the Investigation Assistant app archive from the IBM Security App Exchange on your local computer. You must have an IBM ID to access the IBM Security App Exchange.
  2. If you downloaded the app from the App Exchange, complete the following steps:
    1. On the QRadar Console, click Admin > Extensions Management.
    2. In the Extension Management window, click Add and select the app archive that you want to upload to the console.
    3. Select the Install immediately checkbox and click Add.
    4. In the window that prompts you to update the current app version, leave the Replace existing items. (Application data is preserved) option selected, and click Install.
      Important: You might have to wait several minutes before your app becomes active.

What to do next

You must refresh your browser before you can use the upgraded app.