Changing the network settings in an All-in-One system

You can change the network settings in your All-in-One system. An All-in-One system has all IBM QRadar components that are installed on one system.

Before you begin

  • You must have a local connection to your QRadar Console
  • Confirm that there are no undeployed changes.
  • If you are changing the IP address host name of a box in the deployment you must remove it from the deployment.
  • If this system is part of an HA pair you must disable HA first before you change any network settings.
  • If the system that you want to change is the console, you must remove all hosts in the deployment before proceeding.
Important: You cannot change the IP address of any host to the IP address of a previously deleted Managed Host.

Procedure

  1. Log in to as the root user.
  2. Type the following command:

    qchange_netsetup

    Important:
    • If you attempt to run qchange_netsetup over a serial connection, the connection can be misidentified as a network connection. To run over a serial connection use qchange_netsetup -y. This command allows you to bypass the validation check that detects a network connection.
    • Verify all external storage that is not /store/ariel or /store is not mounted.
  3. Follow the instructions in the wizard to complete the configuration.

    The following table contains information to help you configure the network settings.

    Table 1. Description of network settings for an QRadar SIEM All-in-One (QRadar Console)
    Network Setting Description

    Internet Protocol

    		 IPv4 or IPv6

    Host name

    Fully qualified domain name

    Secondary DNS server address

    Optional

    Public IP address for networks that use Network Address Translation (NAT)

    Optional

    Used to access the server, usually from a different network or the Internet.

    Configured by using Network Address Translation (NAT) services on your network or firewall settings on your network. (NAT translates an IP address in one network to a different IP address in another network).

    Email server name

    If you do not have an email server, use localhost.

    A series of messages are displayed as QRadar processes the requested changes. After the requested changes are processed, the QRadar system is automatically shutdown and restarted.