You can recover a failed primary high-availability (HA) IBM
QRadar host if the build version
of the primary HA host is the same as the QRadar build version installed on
the secondary HA host.
Before you begin
Ensure that the following requirements are met:
- The required hardware is installed.
- You need the cluster virtual IP address and the primary HA host IP address. You can identify the
IP address in the System and License Management window. For more information,
see Viewing HA cluster IP addresses.
- A keyboard and monitor are connected by using the VGA connection.
Procedure
-
Type root at the login prompt to start the installation wizard.
-
Accept the End User License Agreement.
-
Select the appliance type:
- Appliance Install
- Software Install
Important: You must choose the same appliance type as the failed primary. Do not chose
an HA standby appliance.
-
In the Type of Setup window, select HA Recovery
Setup.
-
Follow the instructions in the wizard.
-
Configure the QRadar network
settings.
-
In the Cluster Virtual IP Address Setup window, enter the cluster virtual
IP address.
-
In the Network Information Setup window, enter the original hostname and
the IP address of the primary HA host.
Note: When an HA cluster is created, -primary
is appended to the original hostname of the
primary HA host. Do not include -primary
when you enter the original hostname in the
Network Information Setup window.
-
Configure the QRadar root
password.
-
Review your software version. If your secondary HA host patch version is newer than the
software on this appliance, download and install the SFS (software fix) from Fix Central
(www.ibm.com/support/fixcentral/) to upgrade this appliance to
match the software version.
-
Log in to the QRadar user
interface.
-
Select .
-
Highlight the primary HA host that you are restoring and select .