Installing RHEL on your own appliance

You can install the Red Hat® Enterprise Linux® operating system on your own appliance for use with QRadar® Incident Forensics.

For information about which Red Hat Enterprise Linux versions are supported, see Prerequisite hardware and software.


  1. Copy the Red Hat Enterprise Linux operating system DVD ISO to one of the following portable storage devices:
    • Digital Versatile Disk (DVD)
    • Bootable USB flash drive

      For information about creating a bootable USB flash drive, see the IBM QRadar Installation Guide.

  2. Insert the portable storage device into your appliance and restart your appliance.
  3. From the starting menu, select one of the following options.
    • Select the USB or DVD drive as the boot option.
    • To install on a system that supports Extensible Firmware Interface (EFI), you must start the system in legacy mode.
  4. When prompted, log in to the system as the root user.
  5. To prevent an issue with Ethernet interface address naming, on the Welcome page, press the Tab key and at the end of the Vmlinuz initrd=initrd.image line add biosdevname=0.
  6. Follow the instructions in the installation wizard to complete the installation:
    1. Select the Basic Storage Devices option.
    2. When you configure the host name, the Hostname property can include letters, numbers, and hyphens.
    3. When you configure the network, in the Network Connections window, select System eth0 and then click Edit and select Connect automatically.
    4. On the IPv4 Settings tab, from the Method list, select Manual.
    5. In the DNS servers field, type a comma-separated list.
    6. Select Create Custom Layout option.
    7. Configure EXT4 for the file system type for the /boot partition.
    8. Reformat the swap partition with a file system type of swap.
    9. Select Basic Server.
  7. When the installation is complete, click Reboot.
  8. Ensure that your onboard network interfaces are named eth0, eth1, eth2, and eth3.

What to do next

Installing QRadar Console