Configuring the QRadar Console as the update server

To streamline your maintenance process, you can configure your QRadar Console to be your update server so that QRadar updates are automatically downloaded to the Console.

Procedure

  1. Download the auto update package from Fix Central (www.ibm.com/support/fixcentral/).
    You can find QRadar products in the Security Systems Product Group list on Fix Central.
  2. Save the auto update package file in the /tmp/ directory on your QRadar Console.
    Note: The size of the auto update file is approximately 2 - 5 GB.
  3. Log in to QRadar as the root user.
  4. Check to see if the /opt/qradar/www/autoupdates folder exists. If this folder exists, delete it before completing Step 5.
  5. Create a symbolic link to /opt/qradar/www/autoupdates by typing the following command: 
    mkdir -p /store/downloads/autoupdates; ln -s /store/downloads/autoupdates /opt/qradar/www
  6. To verify that the symbolic link was created properly, type the following command: 
    touch /store/downloads/autoupdates/testfile
  7. Confirm that the test file value is created in the /opt/qradar/www/autoupdates directory by typing the following command: 
    ls /opt/qradar/www/autoupdates
  8. Copy the autoupdates-<version>.tgz file from the /tmp/ directory to the QRadar Console, and place it in the /opt/qradar/www/autoupdates/ directory or the symbolic link directory that you created in Step 6.
  9. On the QRadar Console, type the following commands to extract the auto update package: 
    cd /opt/qradar/www/autoupdates/
tar -zxf /tmp/<name_of_autoupdate_file>
  10. Log in to QRadar.
  11. On the navigation menu ( Navigation menu icon ), click Admin.
  12. In the System Configuration section, click Auto Update.
  13. Click Change Settings, and select the Advanced tab.
  14. In the Directory field, type autoupdates/.
  15. In the Web Server field, type https://<console_IP_address_or_hostname>.
  16. Click Save.