IBM Support

QRadar: Do QRadar upgrades cause an interruption of data collection?

Troubleshooting


Problem

A common question from administrators is if upgrades to QRadar interrupt events or flow data collection while the upgrade is in progress.

Symptom

NA

Cause

NA

Environment

QRadar v7.x

Diagnosing The Problem

NA

Resolving The Problem

When administrators apply fix packs to upgrade QRadar to a new software version, a warning message is displayed during the patch installer stating that an interruption of data collection and correlation will occur due to services that need to be restarted. Administrators have the option to type No (N), which exits the installer.

WARNING:  Services need to be shutdown in order to apply patches.
This will cause an interruption to data collection and correlation.

Do you wish to continue (Y/N)?


-------
Where do you find more information?

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Documentation","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21975570

Page Feedback