Prerequisites for installing QRadar Incident Forensics on your own appliance

Before you install the Red Hat® Enterprise Linux® (RHEL) operating system on your own appliance, ensure that your system meets the system requirements.

The following table describes the system requirements:

Table 1. System requirements for RHEL installations on your own appliance
Requirement Details
Supported software version The RHEL version is dependent on the QRadar version that you are installing.

View the supported RHEL versions here.

Bit version 64-bit
Kickstart disks Not supported
Memory (RAM) for Forensics processor Minimum 128 GB

You must upgrade your system memory before you install QRadar.
Free disk space for Forensics processor Minimum 5% of total disk space

For optimal performance, ensure that an extra 2-3 times of the minimum disk space is available.

Firewall configuration WWW (http, https) enabled

SSH enabled

Before you configure the firewall, disable the SELinux option. The QRadar installation includes a default firewall template that you can update in the System Setup window.
Restriction: Resizing logical volumes by using a logical volume manager (LVM) is not supported.