IBM Support

QRadar: Enable Debugging Mode in SSH to Troubleshoot Connectivity Issues

Troubleshooting


Problem

QRadar communicates between the Console and Managed Hosts using SSH connections. Encryption allows  QRadar to tunnel services that are not encrypted through an SSH connection. This article talks about how to enable SSH debug to identify SSH issues between the Console and Managed hosts.

Symptom

Trying to establish an SSH connection from the Console to a Managed Host fails with a similar error:

[root@Console-1 ~]# ssh 192.0.2.11 22
ssh: connect to host 192.0.2.11 port 22: No route to host
ssh: connect to host 192.0.2.11 port 22: Connection timed out.
ssh: connect to host 192.0.2.11 port 22: Connection refused
 

Document Location

Worldwide

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"Deploy","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
08 January 2021

UID

ibm10960862