You must download the adapter files to your IBM®
QRadar® SIEM Console, and then
copy them to IBM
QRadar Risk Manager.
Before you begin
After you establish the initial connection, QRadar SIEM Console is the only device that
can communicate directly with QRadar
Risk Manager.
Procedure
-
Using SSH, log in to your QRadar SIEM Console as the root user.
-
Download the compressed file for the QRadar
Risk Manager adapters from
Fix Central
(www.ibm.com/support/fixcentral/) to your QRadar SIEM Console.
-
To copy the compressed file from your QRadar SIEM Console to QRadar
Risk Manager, type the
following command:
scp adapters.zip
root@IP_address:
The IP_address option is the IP address or host name of QRadar
Risk Manager.
For example:
scp adapters.bundle-2014-10-972165.zip root@192.0.2.0:
-
On your QRadar
Risk Manager appliance, type the password for the root user.
-
Using SSH from your QRadar SIEM Console, log in to your QRadar
Risk Manager appliance as
the root user.
-
To unpack and install the adapters, type the following commands from the root directory that
contains the compressed file:
unzip adapters.zip
yum install -y adapters*.rpm
For example:
unzip adapters.bundle-2014-10-972165.zip
yum install -y adapters*.rpm
Note:
For QRadar
Risk Manager
versions prior to V.7.2.8 use the rpm command
For example:
rpm -Uvh adapters*.rpm
-
To restart the services for the ziptie server and complete the installation, type the following command:
service ziptie-server restart
Important: Restarting the services for the ziptie server interrupts any device backups
that are in progress from Configuration Source Management.