IBM Support

QRadar: Collecting information on all systems in the deployment with deployment_info.sh

Troubleshooting


Problem

How can I get general information on all systems in the QRadar environment?

Resolving The Problem

This script collects all information about all systems in the deployment, including disk space used, hardware, appliance type, and serial number within a CSV file. This output gives you a report on which appliances might have an issue with disk space filling up in /store. If /store is greater than 95%, then services stop.
  1. Log in to the Console by using the root account via SSH connection.
  2. Run the following command:
/opt/qradar/support/deployment_info.sh 
For example:
# /opt/qradar/support/deployment_info.sh INFO: Gathering deployment information. This may take a while...
CREATED: qradar_deployment_info-10-09-2019.csv
The result is a .CSV file that contains information on the deployment including hostnames, IP addresses, appliance types, hardware information, storage information, Event Per Second information, and Flows Per Second information.

Alternately: You can run the deployment_info.sh script with the -OS option to output a table to the CLI.
  1. Log in to the Console by using the root account via SSH connection.
  2. Run the following command:
/opt/qradar/support/deployment_info.sh -OS
For example:
# /opt/qradar/support/deployment_info.sh -OS INFO: Gathering deployment information. This may take a while...

image-20191010125853-1

Results
The output of this command helps assess deployment information.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"Troubleshooting","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
07 January 2021

UID

ibm11085673