Adding IBM QRadar Risk Manager to IBM QRadar SIEM Console

You must add IBM® QRadar Risk Manager as a managed host to IBM QRadar SIEM Console.

Before you begin

If you want to enable compression, then the minimum version for each managed host must be QRadar Console V7.1 or QRadar Risk Manager V7.1.

To add a managed host that is not NATed to your deployment where the Console is NATed, you must change the QRadar Console to a NATed host. You must change the console before you add the managed host to your deployment. For more information, see the IBM QRadar Administration Guide.

Procedure

  1. Open your web browser.
  2. Type the URL, https://<IP Address>, where <IP Address> is the IP address of the QRadar Console.
  3. Type your user name and password.
  4. On the navigation menu ( Navigation menu icon ), click Admin.
  5. In the System Configuration pane, click System and License Management.
  6. In the System and License Management window, click Deployment Actions, and then select Add Host.
  7. Enter values for the following parameters:
    Option Description
    Host IP The IP address of QRadar Risk Manager.
    Host Password The root password for the host.
    Confirm Host Password Confirmation for your password.
    Encrypt Host Connections Creates an SSH encryption tunnel for the host. To enable encryption between two managed hosts, each managed host must be running QRadar Console V7.1 or QRadar Risk Manager V7.1.
    Encryption Compression Enables data compression between 2 managed hosts.
    Network Address Translation To enable NAT for a managed host, the NATed network must be using static NAT translation. For more information, see the IBM QRadar Administration Guide.
  8. If you select the Network Address Translation check box, then you must enter values for the NAT parameters:
    Option Description
    NAT Group

    The network that you want this managed host to use.

    If the managed host is on the same subnet as the QRadar Console, select the console of the NATed network.

    If the managed host is not on the same subnet as the QRadar Console, select the managed host of the NATed network.

    Public IP The public IP address of the managed host. The managed host uses this IP address to communicate with other managed hosts in different networks that use NAT.
  9. Click Add.
    This process can take several minutes to complete. If your deployment includes changes, then you must deploy all changes.
  10. From the Admin tab, click Advanced > Deploy Full Configuration.

What to do next

Clear your web browser cache and then log in to QRadar Console. The Risks tab is now available.