Collecting MustGather data
IBM Security QRadar® Suite Software provides a mustgather action that you must use to collect system information before you raise an issue that requires IBM® Support. For example, the mustgather action collects logs or system state information that can be used to diagnose an issue.
Before you begin
Install the command-line interface (CLI) utility cpctl from the cp-serviceability pod. For more information, see Installing the cpctl utility.
If the cp-serviceability
pod isn't deployed or isn't available, run the
mustgather action manually. For more information, see cp-serviceability pod not
deployed or unavailable.
About this task
The mustgather action has the following parameters.
Parameter | Description |
---|---|
--token | Specify the cluster administrator token. The token can be generated when you are logged in as an admin user by running the oc whoami -t command. |
--namespaces | Specify the IBM Cloud Pak® namespace or
namespaces where the data is collected for the IBM Cloud Pak and secrets data modules. Separate each
namespace with a semicolon. If you do not specify a namespace, the namespace is set to
|
Procedure
Cp-serviceability pod not deployed or unavailable
You can run the mustgather
action manually if the cp-serviceability pod
is not deployed or is unavailable.
Before you begin
To complete this task, you must be a Red Hat® OpenShift® cluster administrator.
Review the Planning for installation section to ensure that you meet the hardware, system, storage, and other requirements.
Before you install QRadar Suite Software, review and take the following prerequisite steps for a successful installation.
Install Red Hat OpenShift CLI 4.14 or later
The Red Hat OpenShift CLI client helps you develop, build, deploy, and run your applications on any Red Hat OpenShift or Kubernetes cluster. It also includes the administrative commands for managing a cluster under the adm subcommand.
Procedure
Cp-serviceability pod not deployed or unavailable
Run the mustgather
action manually if the cp-serviceability pod is not
deployed or is unavailable.
Procedure
Results
When the MustGather command is run manually, the action prints output to the console.