QRadar EDR Agent system requirements

To ensure that IBM® Security QRadar® EDR QRadar EDR Agent works correctly, you must meet or exceed the system requirements.

The QRadar EDR Agent supports the following platforms.

Table 1. QRadar EDR Agent supported platforms
Agent version Operating system version Processor
Linux® 0.90.0

All minor versions of the following operating versions are supported if no major kernel changes occur between them:

  • Amazon Linux 2
  • CentOS 6, 7, 8
  • CentOS Stream 8, 9
  • Debian 8, 9, 10, 11, 12
  • OpenSUSE Leap 15
  • Oracle Linux 7, 8, 9
  • Red Hat® Enterprise Linux 6, 7, 8, 9
  • Rocky Linux 8, 9
  • SUSE Linux Enterprise Server 12, 15
  • Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS

The highest kernel version that is supported is v6.8.x.

Important:
  • The QRadar EDR Agent is not supported on CentOS 6, CentOS 7, Debian 8, Debian 9, Debian 10, Red Hat Enterprise Linux 6, or Red Hat Enterprise Linux 7 when they are using UEFI Secure Boot.
  • CentOS 6 and Red Hat Enterprise Linux 6 require Linux agent 0.70.0 or later.
  • The following Linux versions are no longer maintained and have limited support:
    • CentOS 6, 7, 8
    • CentOS Stream 8
    • Debian 8, 9, 10
    • Red Hat Enterprise Linux 6, 7
    • SUSE Linux Enterprise Server 12
    • Ubuntu 16.04 LTS, 18.04 LTS
    To receive continued support, upgrade to newer Linux versions.
 Intel or AMD 64-bit
macOS 1.1.0 macOS Monterey, Ventura, and Sonoma 14.0 Intel and Apple Silicon
Windows 3.12
  • Windows client 8.1, 10, 10-POS, 11 (Fully updated)
  • Windows server 2012 R2, 2016, 2019, 2022 (Fully updated)

The Windows QRadar EDR Agent version 3.12.0 extends support for an updated version of nanoOS for the latest Windows 10 and Windows 11 kernels. For more information, see technote 7173575.

Important: The following Windows versions are no longer supported for Windows QRadar EDR Agent version 3.11.1 and later:
  • Windows Server 2008 R2 (SP2) 32-bit
  • Windows Server 2008 R2 (SP2) 64-bit
  • Windows client 7 (SP1) - 32-bit
  • Windows client 7 (SP1) - 64 bit
  • Windows 8 - 32 bit
  • Windows 8 - 64 bit
  • Windows 8.1 - 32 bit
For more information, see technote 7161908.
 Intel or AMD 32-bit and 64-bit
Important: Deploying QRadar EDR alongside existing anti-virus solutions might cause technical issues. The configuration must be thoroughly tested before production.