You must download the adapter files to your IBM®
QRadar® SIEM Console, and then
copy them to IBM
QRadar Risk Manager.
Before you begin
After you establish the initial connection, QRadar SIEM Console is the only device that
can communicate directly with QRadar
Risk Manager.
Procedure
-
Using SSH, log in to your QRadar SIEM Console as the root user.
-
Download the compressed file for the QRadar
Risk Manager adapters from
Fix Central
(www.ibm.com/support/fixcentral/) to your QRadar SIEM Console.
-
To copy the compressed file from your QRadar SIEM Console to QRadar
Risk Manager, type the
following command:
scp adapters.zip
root@IP_address:
The IP_address option is the IP address or host name of QRadar
Risk Manager.
For example:
scp adapters.bundle-2014-10-972165.zip
root@192.0.2.0:
-
On your QRadar
Risk Manager appliance, type the password for the root user.
-
Using SSH from your QRadar SIEM Console, log in to your QRadar
Risk Manager appliance as
the root user.
-
To unpack and install the adapters, type the following commands from the root directory that
contains the compressed file:
unzip adapters.zip
yum install -y adapters*.rpm
For example:
unzip
adapters.bundle-2014-10-972165.zip
yum install -y
adapters*.rpm
Important: For
QRadar
Risk Manager versions
before V.7.2.8, use the
rpm command. For example:
rpm -Uvh
adapters*.rpm
-
To restart the services for the ziptie server and complete the installation, type the following command:
service ziptie-server restart
Important: Restarting the services for the ziptie server interrupts any device
backups that are in progress from Configuration Monitor.