IBM Support

QRadar: How to modify DNS settings on a QRadar Appliance.

How To


Summary

This article provides instructions on how to modify the DNS settings of a QRadar Appliance.

Steps

The administrators who want to modify the DNS settings of a QRadar Appliance use one of the following methods:
Note: Networking changes to a QRadar Appliance must be done using the qchange_netsetup script.
  1. Modify the DNS settings by using the qchange_netsetup script.
  2. Modify the DNS settings manually:
    Note: the following is not supported, and provided as a curtesy. 
    1. Modify the /etc/resolv.conf file to use the new DNS settings by using vim: 
      vim /etc/resolv.conf
      The lines to modify in the resolv.conf file are: 
      nameserver <IP>
    2. Modify the ifcfg file for the desired interface to use the new DNS settings by using vim:
      Note: This step guarantees that the changes will not be overwritten during a patch. 
      vim /etc/sysconfig/network-scripts/ifcfg-$(cat /etc/management_interface)
      The lines to modify in the ifcfg file are: 
      DNS1=<IP>
DNS2=<IP>
PEERDNS=no
      Result
      The administrator has changed the DNS settings of a QRadar Appliance. If problems are found during this process, use qchange_netsetup instead.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtNAAQ","label":"Deployment"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Document Information

Modified date:
24 May 2024

UID

ibm17152531

Page Feedback