Installing QRadar Network Insights software on a QRadar appliance

Follow these instructions to reinstall IBM QRadar Network Insights on IBM hardware.

Before you begin

Before you install QRadar Network Insights, ensure that the following requirements are met:

  • The appliance hardware is installed.
  • A keyboard and monitor are connected by using the VGA connection.
You must download the QRadar Network Insights installation file from IBM Fix Central (www.ibm.com/support/fixcentral/).

About this task

Install the QRadar Console on one appliance, and the QRadar Network Insights managed host on another appliance.
Restriction: Software versions for all appliances in a deployment must be the same version and fix level. Deployments that use different versions of software are not supported.

Resizing logical volumes is not supported.

QRadar Network Insights requires only a connection to the QRadar console. You can deploy QRadar Network Insights separately from the IBM QRadar Incident Forensics deployment.

Procedure

  1. Download the ISO installer from Fix Central (www.ibm.com/support/fixcentral/).
  2. Mount the ISO installation file.
    1. Map the ISO to a device for your appliance by using the Integrated Management Module (IMM) or the Integrated Dell Remote Access Controller (iDRAC), or insert a bootable USB drive that you've created with the ISO.
      For information about creating a bootable USB flash drive, see:
    2. Restart the appliance.
  3. When prompted, type flatten and press Enter.
  4. Follow the instructions in the installation wizard.
    On the Select the Appliance ID page, choose from the following appliance ID options:
    Table 1. QRadar Network Insights appliances
    QRadar Network Insights appliances Appliance ID
    QRadar Network Insights 1901 6300
    QRadar Network Insights 1910 6400
    QRadar Network Insights 1920 6200
    QRadar Network Insights 1940 6600

    6610 New in 7.5.0 Update Package 3
    Software or virtual appliance installations 6500
    The QRadar Network Insights appliance reboots during the installation.
  5. Add the QRadar Network Insights managed host to QRadar:
    1. Log in to QRadar:
      https://IP_Address_QRadar

      The default user name is admin. The password is the password of the root user account.

    2. On the Admin tab, in the System Configuration section, click System and License Management.
    3. In the Display list, select Systems.
    4. On the Deployment Actions menu, click Add Host.
    5. Configure the settings for the managed host by providing the fixed IP address, and the root password to access the operating system shell on the appliance.
    6. Click Add.
    7. On the Admin tab, click Advanced > Deploy Full Configuration.
  6. Apply your license key.
    1. On the Admin tab, click System Configuration.
    2. Click the System and License Management icon.
    3. From the Display list, select Licenses, and upload your license key.
    4. Select the unallocated license and click Allocate System to License.
    5. From the list of licenses, select the license, and click Allocate License to System.

    Apply your QRadar Network Insights license key to the managed host.

What to do next

After you install the QRadar Network Insights software, you must configure the appliance.