QRadar Network Insights software installations on your own hardware

Your appliance must have the Red Hat Enterprise Linux (RHEL) operating system installed on it before you install IBM QRadar Network Insights.

1. Map the ISO to a device for your appliance by using the Integrated Management Module (IMM) or the Integrated Dell Remote Access Controller (iDRAC), or insert a bootable USB drive with the ISO.
   For information about creating a bootable USB flash drive, see:

   • Creating a bootable USB flash drive with Microsoft Windows
   • Creating a bootable USB flash drive on a Apple Mac OS X system
   • Creating a bootable USB flash drive with Red Hat Linux
2. Insert the portable storage device into your appliance and restart your appliance.
3. From the starting menu, do one of the following options:
   • Select the device that you mapped the ISO to, or the USB drive, as the boot option.
   • To install on a system that supports Extensible Firmware Interface (EFI), you must start the system in legacy mode.
4. When prompted, log in to the system as the root user.
5. Follow the instructions in the installation wizard to complete the installation:
   1. Set the language to English (US).
   2. Click Date & Time and set the time for your deployment.
   3. Click Software selection and select Minimal Install.
   4. Click Installation Destination and select the I will configure partitioning option.
   5. Select LVM from the list.
   6. Click the Add button to add the mount points and capacities for your partitions, and then click Done.
   7. Click Network & Host Name.
   8. Enter a fully qualified domain name for your appliance host name.
   9. Select the interface in the list, move the switch to the ON position, and click Configure.
   10. On the General tab, select the Automatically connect to this network when it is available option.
   11. On the IPv4 Settings or IPv6 Settings tab, select Manual in the Method list.
   12. Click Add.
       • For an IPv4 deployment, enter the IP address, Netmask, and Gateway for the appliance in the Addresses field.
       • For an IPv6 deployment, enter the IP address, Prefix, and Gateway in the Addresses field.
   13. Add two DNS servers.
   14. Click Save > Done > Begin Installation.
6. Set the root password, and then click Finish configuration.
7. After the installation finishes, disable SELinux by modifying the /etc/selinux/config file, and restart the appliance.

1. Copy the installation .iso file to the device.
2. Create the /media/cdrom directory by typing the following command:

   mkdir /media/cdrom

3. Mount the .iso file by using the following command:

   mount -o loop <software_installation_file.iso> /media/cdrom

4. Run the installation setup wizard by using the following command:

   /media/cdrom/setup

   Note: A new kernel might be installed as part of the installation, which requires a system restart. Repeat the commands in steps 3 and 4 after the system restart to continue the installation.
5. On the Software Installed System window, select Software Install.
6. On the Software Appliance Assignment window, choose Network Insights.
7. For the type of setup, select Normal Setup (default) or HA Recovery Setup
8. Select the continent and time zone.

   The default selection is the time zone that is specified in the Red Hat Enterprise Linux install.

9. On the Management Interface Setup window, select the management interface.
10. On the Network Information Setup window, the host name and IP address is automatically loaded.

    You can enter a static IP address, or use the assigned IP address.

11. On the Root Password Setup window, set a password.

    This is the password that you use to add the managed host to the QRadar Console.

12. Click Finish.
13. Follow the instructions in the installation wizard to complete the installation.

    The installation process might take several minutes.

14. Add the QRadar Network Insights managed host to QRadar:
    1. Log in to QRadar:
       https://IP_Address_QRadar

       The default user name is admin. The password is the password of the root user account.

    2. On the Admin tab, in the System Configuration section, click System and License Management.
    3. In the Display list, select Systems.
    4. On the Deployment Actions menu, click Add Host.
    5. Configure the settings for the managed host by providing the fixed IP address and the root password.
    6. Click Add.
    7. On the Admin tab, click Advanced > Deploy Full Configuration.
15. Apply your license key.
    1. On the Admin tab, click System Configuration.
    2. Click the System and License Management icon.
    3. From the Display list, select Licenses, and upload your license key.
    4. Select the unallocated license and click Allocate System to License.
    5. From the list of licenses, select the license, and click Allocate License to System.

    Only the QRadar Network Insights managed host requires a license. The QRadar Console does not need a QRadar Network Insights license.