IBM Support

QRadar: Moving license from Console to Event Processor

Question & Answer


Can you move a License applied to the Console to another QRadar Appliance such as a 16xx, 17xx or 18xx?


The Wrong License could have been applied on the console.


QRadar licenses are designated with the appliance type in the license key to avoid confusion to which appliance they are meant for.

If a license for an Event Processor is mistakenly applied to the Console, there is a 14 day period where the licence can be revoked and reapplied to the correct appliance.

If the license was recently applied it can be moved using the following procedure:

  1. Click on the Admin tab > System and License Management.

  2. Click on Display licenses.

  3. Click on the system to revert the license.

  4. Click on Revert Allocation.

  5. Click Deploy License Changes > Continue.

  6. The License is now available for allocation and can be applied to the correct appliance.

If the license was for the Console, then the probability of moving it to an Event Processor is very low. If license is for Event Processor and was applied incorrectly to Console, then the 14 day time window will allow it to be changed to the Event Processor. After that time window the license cannot be moved. A new license will need to be acquired for use on the Event Processor.

If you need to acquire a new license contact product distribution as explained in the Technote 1665955: Requesting a missing license or activation key.

Where do you find more information?

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Licensing","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018