IBM Support

QRadar: Unable to SSH to High Availability Appliance

Troubleshooting


Problem

I cannot SSH from primary to secondary appliances in High Availability (HA).
 

Symptom

  1. When adding High Availability (HA) to the Data Node, the HA wizard showed a failure to SSH, suggesting invalid password may have been used.
  2. When trying to test the Crossover by typing the command
    /opt/qradar/ha/bin/qradar_nettune.pl crossover status
    You see this message
    Crossover status: configured/disabled
        Role: [primary/secondary]
        Admin status: disabled
        Operative status: stopped
        Interface: ens4
        Interface status: UP
        Interface MTU: 9000
        Firewall status: enabled
        Routing status: disabled
    This message indicates that the crossover is configured but has stopped and it is not sending data.

Document Location

Worldwide

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"HA;Networking","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
26 January 2021

UID

ibm10882644

Page Feedback