Reinstalling from the recovery partition

You can reinstall IBM® QRadar® products from the recovery partition.

Before you begin

If your deployment includes offboard storage solutions, you must disconnect your offboard storage before you reinstall QRadar. After you reinstall, you can remount your external storage solutions. For more information about configuring offboard storage, see the Offboard Storage Guide.

Warning: Software installations do not come with the recovery partition available, and also these instructions do not apply.

Procedure

  1. Restart your QRadar appliance and select Factory re-install.
  2. Type flatten or retain.

    The installer partitions and reformats the hard disk, installs the OS, and then reinstalls the QRadar product. You must wait for the flatten or retain process to complete. This process can take up to several minutes. When the process is complete, a confirmation is displayed.

  3. Log in as the root user.
  4. Ensure that the End User License Agreement (EULA) is displayed.
    Tip: Press the Spacebar key to advance through the document.
  5. For QRadar Console installations, select the Enterprise tuning template.
  6. Follow the instructions in the installation wizard to complete the installation.
  7. If you are installing a Console, apply your license key.
    1. Log in to QRadar as the admin user:

      https://<IP_Address_QRadar>

    2. Click Login.
    3. On the navigation menu ( Navigation menu icon ), click Admin.
    4. In the navigation pane, click System Configuration.
    5. Click the System and License Management icon.
    6. From the Display list box, select Licenses, and upload your license key.
    7. Select the unallocated license and click Allocate System to License.
    8. From the list of systems, select a system, and click Allocate System to License.