How To
Summary
This technote includes more detailed information on how to obtain, download, and install the MySQL driver, which is needed when you create a log source with JDBC protocol and for a MySQL type database.
Objective
This article complements the Product Documentation here: QRadar: JDBC protocol configuration options
QRadar does not include the MySQL driver for JDBC by default. If you are using a DSM or protocol that requires the MySQL JDBC driver, it must be downloaded and installed separately. You can download it from the MySQL site: http://dev.mysql.com/downloads/connector/j/.
Steps
- Download the driver from: https://downloads.mysql.com/archives/c-j/
- Select:
- "Product Version": 5.1.48
- "Operating System" as Platform independent.
- Click Download for Platform Independent (Architecture Independent), ZIP Archive (mysql-connector-java-5.1.48.zip).
- Extract both JAR files from the .zip file. Do not use the one with "-bin" in the name.
- Copy the mysql-connector-java-5.1.48.jar file to the paths mentioned in the DSM Configuration Guide on the collectors that are used to connect to the DB server:
/opt/qradar/jars/
/opt/ibm/si/services/ecs-ec-ingress/eventgnosis/lib/q1labs/ - Remove any older versions present, for example mysql-connector-java-5.1.30.jar, and any files with "-bin" in the name, like "mysql-connector-java-5.1.30-bin.jar".
- Restart ecs-ec-ingress on each collector you put the JAR file.
systemctl restart ecs-ec-ingress
- Confirm that the JAR file has correct permissions and ownership:
ll /opt/qradar/jars/mysql-connector-java-*.jar
- If required, permissions and ownership can be changed with:
chmod 644 /opt/qradar/jars/mysql-connector-java-*.jar chown nobody:nobody /opt/qradar/jars/mysql-connector-java-*.jar
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt0AAA","label":"Log Source"}],"ARM Case Number":"TS008154032","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
10 November 2022
UID
ibm16562267