IBM Support

QRadar: 'System not installed' error when adding host



When adding a new host, 'System not installed' error is seen.


When trying to add a newly installed host, you are receiving an error message indicating that the system is not installed on the host. When you review the logs, you find the following message:

Feb 5 14:38:27 ::ffff: [add_host] [main] com.q1labs.configservices.capabilities.AddHost: [ERROR] [NOT:0000003000][ -] [-/- -]System is not installed on host
Feb 5 14:38:27 ::ffff: [add_host] [main] com.q1labs.configservices.common.ConfigServicesException: System is not installed on host

Resolving The Problem

Install the patch that matches the QRadar build on the Console.

From the QRadar Web User Interface Click on Help > About to verify the Console build.

If the problem is not a version mismatch, follow the instructions below:

  1. Use a KVM, DRAC or IMM to access the QRadar Appliance you are trying to add.
  2. To get the QRadar Build Version at the CLI prompt enter the command.
  3. Confirm your IP address configuration to ensure that the host you are attempting to add is in fact the host you are intending to add. To verify this use the command.
  4. Check that the version on the newly installed host matches that of the Console including the major version, the patch number and the interim fix number.
    A Managed Host is required to match the version of the rest of the Deployment exactly.
  5. Check that the following file exists on the host you are attempting to add:
  • /opt/qradar/conf/.configdone

This file is created when the patch installer completes successfully and if it is missing that may indicate an installation problem with your new host.

Where do you find more information?

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Admin Console","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
31 August 2018