IBM Support

QRadar: What Verson of the ASU utility does my QRadar appliance require

Troubleshooting


Problem

There are different utilities required to run ASU commands, which are dependent on the QRadar® hardware appliance type you are using.

Symptom

This applies to both 7.3.x and 7.4.x software versions.
# /opt/lenovo/toolscenter/asu/asu64 show IMM --kcs
Lenovo Advanced Settings Utility version 10.4.94M
Licensed Materials - Property of Lenovo
(C) Copyright Lenovo Corp. 2007-2017 All Rights Reserved
Connected via IPMI device driver (KCS interface)
Read of data store failed with completion code 10
Close of data store failed with completion code 10
Retry after 500ms
Read of data store failed with completion code 10
Close of data store failed with completion code 10
Retry after 500ms
Read of data store failed with completion code 10
Close of data store failed with completion code 10
Retry after 500ms

Cause

The M6 QRadar hardware appliances require a different utility to run ASU commands than what is used for the M4 and M5 hardware appliances. However, the Lenovo Advanced Settings Utility (ASU) can be used with M4 and M5 QRadar hardware appliances, Lenovo XClarity Essentials OneCLI is required for M6 QRadar hardware appliances.

Resolving The Problem

To Resolve the Problem.
Note: On QRadar 7.3.1 versions, the asu64 utility is in /opt/lenovo/toolscenter/asu

  1. Download the build of the ASU64 Utility .TGZ file for your appliance.
    Software
    Build
    Hardware
    Appliance
    Operating
    System
    ASU
    Utility
    Download
    Link
    QRadar 7.3.x
    QRadar 7.4.x
    RHEL 7 ASU 10.4 Installed
    QRadar 7.3.x
    QRadar 7.4.0 GA
    M6 RHEL 7 OneCLI OneCLI download page
    QRadar 7.4.x* M6 RHEL 7 OneCLI Installed
    *The OneCLI utility was added in QRadar build 7.4.0 Fix Pack 1.
  2. From the OneCLI download page, look for the OneCLI RPM for RHEL 7.

  3. Using WinSCP or another similar utility, upload the OneCLI utility to the /tmp directory on the Console.

  4. Using an SSH session as root, connect to the affected appliance.

  5. Use YUM to install the OneCLI utility:
    yum -y install /tmp/lnvgy_utl_lxcer_onecli01l-3.1.2_rhel_x86-64.rpm
  6. To test the new asu64 utility, run the command:
    /opt/lenovo/lnvgy-utl-lxce-onecli/asu show IMM

Results: You now have the OneCLI utility installed.

Notes:

  1. OneCLI is compatible with earlier hardware versions and works with the M4 and M5 QRadar hardware appliances.
  2. However, the utilities use different executable files, the command structure is similar.
     
    /opt/lenovo/toolscenter/asu/asu64 show IMM --kcs
    /opt/lenovo/lnvgy-utl-lxce-onecli/asu show IMM
    *KCS is the default communication method for OneCLI and does not have to be specified as it is when ASU64 is used.


[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtcAAA","label":"Hardware"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.0;7.4.0"}]

Document Information

Modified date:
01 June 2021

UID

ibm10720133