Support actions
IBM Security QRadar® Suite Software provides command actions to help you with support tools, diagnostics, troubleshooting, and remediation.
You access support actions through the cpctl command-line interface (CLI) utility. For more information, see Installing the cpctl utility.
By using the QRadar Suite Software support actions, you can complete the following tasks.
Tools
| Task | Description |
|---|---|
| Deploying OpenLDAP | Deploy an instance of the OpenLDAP chart. |
| Updating your QRadar Suite Software TLS certificates | Update your IBM Security QRadar Suite Software TLS certificates. |
| Running the execute sequence | Run a QRadar Suite Software application sequence operation. |
| ../scp-core/backup-intro.html#concept_nyf_b41_ftb | Run QRadar Suite Software scheduled backup. |
| Synchronizing QRadar Suite Software Certificates with the cluster certificate | Synchronize QRadar Suite Software TLS certificates with the Red Hat OpenShift cluster certificates. |
| Synchronizing QRadar Suite Software CouchDB and Redis certificates | Refresh the QRadar Suite Software middleware components (CouchDB and Redis) certificates. |
| Adding hostAlias entries to QRadar Suite Software deployment | The procedure enables the Red Hat OpenShift cluster running IBM Security QRadar Suite Software connect to the DNS. It can also be used when the DNS entry for QRadar Suite Software is invalid. |
| Generating an AES key | Generate an AES encryption key to use when backing up QRadar Suite Software data. |
Diagnostics
| Task | Description |
|---|---|
| Checking QRadar Suite Software deployment status | Run a check to query the overall cluster health. |
| Checking the deployment | Troubleshoot failures in the QRadar Suite Software deployment. |
| Collecting MustGather data | Collect system information and diagnostics. |
| Collecting OLM data | Collect Operator Lifecycle Management (OLM) information. |
| Extracting logs from the EFK stack | Collect historical logs from the cluster's logging service. The cluster logging components are based on Elasticsearch, Fluentd, and Kibana (EFK). |
| Checking the changelog processing status | Check changelog information and diagnostics. |
| Checking QRadar Suite Software and foundational services certificates | Verify QRadar Suite Software and IBM Cloud Pak® foundational services TLS certificates. |
| Checking the status of QRadar Suite Software deployments | Run the check_status action to check the status of all deployments on QRadar Suite Software. |
| Checking the logging levels | Use the set_logging_levels action to change the logging level for a given deployment within an application. |
| Changing the logging levels | Use the get_logging_levels action to return a list of services for a given application, for which logging was configured.. |
Remediation
| Task | Description |
|---|---|
| Remediating Analytics Toolkit issues | Run an Analytics Toolkit diagnosis or remediation operation. |
| Synchronizing the foundational services password | Synchronize the IBM Cloud Pak foundational services certificate credentials when they are changed. |
| Account, user, and entitlements troubleshooting | Synchronize the latest LDAP directories with IBM Security QRadar Suite Software. |
| Cleaning up UDI and DE search data | Remove Data Explorer PostgreSQL search data that is older than the number of days that you specify. |
| Restarting Redis | Restart the Redis instance if during a cluster reboot or possible network flux in the
Red Hat OpenShift Container Platform environment, the Redis pods
experience a deadlock and are unable to determine a leader pod and appear with error
Init:CrashLoopBackOff. |
| Removing tombstone records from CouchDB databases | Remove tombstone records from CouchDB databases to speed up the backup and restore process. |