Configuring an update server

Configure an Apache server as the update server for your IBM QRadar deployment.

Before you begin

Download the autoupdate package from Fix Central (www.ibm.com/support/fixcentral/). You can find QRadar products in the Security Systems Product Group.

Procedure

  1. Access your Apache server and create an update directory named autoupdates/.

    By default, the update directory is in the web root directory of the Apache server. You can place the directory in another location if you configure IBM QRadar accordingly.

  2. Optional: Create an Apache user account and password to be used by the update process.
  3. Save the autoupdate package file on your Apache server in the autoupdates/ directory that you created.
  4. On the Apache server, type the following command to uncompress the autoupdate package. 
    tar -zxf updatepackage-[timestamp].tgz
  5. On the navigation menu ( Navigation menu icon ), click Admin.
  6. In the System Configuration section, click Auto Update.
  7. Click Change Settings, and click the Advanced tab.
  8. In the Server Config pane, configure the settings for the Apache server.
    1. In the Web Server field, type the address or directory path of your Apache server.

      If the Apache server runs on non-standard ports, add the port number to the end of the address. For example, type http://my-auto-update-server.com:8080/.

    2. In the Directory field, type the directory location where the web server stores the updates.

      The default directory is autoupdates/.

    3. Optional: If the application server uses a proxy server to connect to the internet, type the URL in the Proxy Server field.
    4. Optional: If you are using an authenticated proxy, type the credentials in the Proxy Username and Proxy Password fields.
  9. Click Save.
  10. On the Admin tab, click Deploy changes.
  11. Using SSH, log in to QRadar as the root user.
  12. Type the following command to configure the user name that you set for your Apache server: 
    /opt/qradar/bin/UpdateConfs.pl -change_username <username>
  13. Type the following command to configure the password that you set for your Apache server: 
    /opt/qradar/bin/UpdateConfs.pl -change_password <password>
  14. To test the update server, type the following command as a single line of text in the command line interface. 
    wget -q -O- --no-check-certificate 
https://<your update server>/<directory path to updates>/manifest_list
  15. Type the user name and password.