Changing the network settings of a QRadar Console in a multi-system deployment

To change the network settings in a multi-system IBM® QRadar® deployment, remove all managed hosts, change the network settings, add the managed hosts again, and then reassign the component.

Before you begin

  • You must have a local connection to your QRadar Console
  • If you are adding a network adapter to either physical appliance or a virtual machine, you must shut down the appliance before you add the network adapter. Power on the appliance before you follow this procedure.
Important: You cannot change the IP address of any host to the IP address of a previously deleted Managed Host.

Procedure

  1. To remove managed hosts, log in to QRadar:

    https://IP_Address_QRadar

    The Username is admin.

    1. On the navigation menu ( Navigation menu icon ), click Admin.
    2. Click the System and License Management icon.
    3. Select the managed host that you want to remove.
    4. Select Deployment Actions > Remove Host.
    5. in the Admin settings, click Deploy Changes.
  2. Type the following command: qchange_netsetup.
    Important:
    • If you attempt to run qchange_netsetup over a serial connection, the connection can be misidentified as a network connection. To run over a serial connection use qchange_netsetup -y. This command allows you to bypass the validation check that detects a network connection.
    • Verify all external storage which is not /store/ariel or /store is not mounted.
  3. Follow the instructions in the wizard to complete the configuration.

    The following table contains descriptions and notes to help you configure the network settings.

    Table 1. Description of network settings for a multi-system QRadar Console deployment
    Network Setting Description

    Internet Protocol

    		 IPv4 or IPv6

    Host name

    Fully qualified domain name

    Secondary DNS server address

    Optional

    Public IP address for networks that use Network Address Translation (NAT)

    Optional

    Used to access the server, usually from a different network or the Internet.

    Configured by using Network Address Translation (NAT) services on your network or firewall settings on your network. (NAT translates an IP address in one network to a different IP address in another network).

    Email server name

    If you do not have an email server, use localhost.

    After you configure the installation parameters, a series of messages are displayed. The installation process might take several minutes.

  4. To re-add and reassign the managed hosts, log in to QRadar.

    https://IP_Address_QRadar

    The Username is admin.

    1. On the navigation menu ( Navigation menu icon ), click Admin.
    2. Click the System and License Management icon.
    3. Click Deployment Actions > Add Host.
    4. Follow the instructions in the wizard to add a host.

      Select the Network Address Translation option to configure a public IP address for the server. This IP address is a secondary IP address that is used to access the server, usually from a different network or the Internet. The Public IP address is often configured by using Network Address Translation (NAT) services on your network or firewall settings on your network. NAT translates an IP address in one network to a different IP address in another network

  5. Reassign all components that are not your QRadar Console to your managed hosts .
    1. On the navigation menu ( Navigation menu icon ), click Admin.
    2. Click the System and License Management icon.
    3. Select the host that you want to reassign.
    4. Click Deployment Actions > Edit Host Connection.
    5. Enter the IP address of the source host in the Modify Connection window.