Creating a bootable USB drive with Red Hat Linux

Edit online

You can use a desktop or notebook system with Red Hat Enterprise Linux V7 or higher to create a bootable USB drive that you can use to install QRadar software.

Before you begin

You must have access to the following items:

An 8 GB or larger USB drive
A QRadar 7.5.0 or later ISO image file

About this task

When you create a bootable USB drive, the contents of the drive are deleted.

Procedure

Download the QRadar ISO image file from Fix Central (www.ibm.com/support/fixcentral/).
Insert the USB drive into a USB port on your system.

It might take up to 30 seconds for the system to recognize the USB drive.
Open a terminal and type the following command to determine the name of the USB drive:
```
dmesg | grep SCSI
```
The system outputs the messages produced by device drivers. The following example shows the name of the connected USB drive as sdb.
[ 170.171135] sd 5:0:0:0: [sdb] Attached SCSI removable disk

Type the following commands to unmount the USB drive:

df -h | grep <name_of_the_connected_USB_flash_drive>
umount /dev/<name_of_the_connected_USB_flash_drive>

Example:

[root@m5qa04 ~]# dmesg | grep SCSI
[93425.566934] sd 14:0:0:0: [sdb] Attached SCSI removable disk
[root@m5qa04 ~]# df -h | grep sdb
[root@m5qa04 ~]# umount /dev/sdb
umount: /dev/sdb: not mounted

Type the following command to write the QRadar ISO to your USB drive:

dd if=/<qradar>.iso of=/dev/<name_of_the_connected_USB_flash_drive> bs=512k

Example:

[root@m5qa04 ~]# dd if=Rhe764QRadar2021_2_0_20201215210530.iso of=/dev/sdb bs=512k
11112+0 records in
11112+0 records out
5825888256 bytes (5.8 GB) copied, 1085.26 s, 5.4 MB/s

Remove the USB drive from your system.

What to do next

See Installing QRadar with a USB drive.