".concat(u,"
")||"","\n "):'\n\n '.concat(o,"\n
\n ").concat(u&&"".concat(u,"
")||"","\n "),this.rendered=!0}},{key:"connectedCallback",value:function(){this.rendered||this.render()}},{key:"attributeChangedCallback",value:function(e,t,n){t!==n&&(this.previousAttributes[e]=t,this[e]=null,this.render())}}])&&i(n.prototype,m),u&&i(n,u),Object.defineProperty(n,"prototype",{writable:!1}),y}(m(HTMLElement));function l(e){return l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},l(e)}function b(e,t){for(var n=0;n\n ".concat(m,"\n
\n "),"\n "),this.appendChild(b),n){var y=document.createElement("p");y.classList.add("menu_right_subtitle"),y.innerHTML=n,this.appendChild(y)}var d=document.createElement("ul");d.classList.add("menu_sub-links");var p=assembleLinks(c),f=assembleLinks(a),h=assembleLinks(s);d.appendChild(p),d.appendChild(f),d.appendChild(h),this.appendChild(d),this.rendered=!0}},{key:"connectedCallback",value:function(){this.rendered||this.render()}},{key:"attributeChangedCallback",value:function(e,t,n){t!==n&&(this.previousAttributes[e]=t,this.render())}}])&&b(o.prototype,i),m&&b(o,m),Object.defineProperty(o,"prototype",{writable:!1}),a}(y(HTMLElement));window.customElements.define("ibm-community-menu-sub-right",g),n(459),n(480),n(680),n(111)})()})();- Log in
Skip to main content (Press Enter).
Sign in
Skip auxiliary navigation (Press Enter).
${item.type}
${item.title}
Community
- Security
- Topic groups
- IBM Cloud Pak for Security
- IBM Security Global Forum
- IBM Guardium
- IBM MaaS360
- IBM QRadar
- IBM QRadar SOAR
- IBM Trusteer
- IBM Verify
- IBM Z Security
- Groups
- AI
- Automation
- Data
- Security
- Sustainability
- Cloud
- Power
- Storage
- IBM Japan
- All Groups
- Champions
- User groups
- Security user groups
- All user groups
- Events
- IBM TechXchange Conference
- Upcoming Security Events
- IBM TechXchange Webinars
- All IBM TechXchange Community Events
- Participate
- Welcome Corner
- Blogging in the Community
- Directory
- Community Leaders
- Resources
- Gamification
- Marketplace
IBM Security
Join our 16,000+ members as we work together to
overcome the toughest challenges of cybersecurity.
Start collaborating
Limited-Time Offer: 50% off IBM TechXchange Conference 2025
IBM’s largest technical learning event is back October 6-9 in Orlando, FL
Skip main navigation (Press Enter).
View Only
- Group Home
- Threads 7.5K
- Library 260
- Blogs 414
- Events 0
- Members 4.1K
QRadar App Management - support utilities, CLI, API - need-to-know
By Ralph Belfiore posted Mon December 28, 2020 08:18 PM
By Ralph Belfiore posted Mon December 28, 2020 08:18 PM
1 Like
During the course of my troubleshooting experience i had to be aware of some “utility changes” regarding to app extension management and monitoring.
According to the applied Release of QRadar and deployment scenario (AiO / Apphost as a managed host), you’ll have to keep in mind some improvements/changes of available “support utilities” or CLI commands.
For those who haven’t yet found a summary list or have been updated already their bookmarks with helpful links regarding to this subject, here an offer of consolidated information, helpful support links, commands and “utility changes” just in case..
In case of investigation a status of an app, starting/stopping an app, updating an app there a some details to consider. For example, in Release 7.3.x you needed to remember the following psql command with many options in CLI to display app id, name, status, version and more context of the applied apps running on the CONSOLE:
Starting with the Qradar Assistant App Release 3.0 (current release is 3.2.1) as an admin you can use also the assistant app to comfortable handle and maintain apps over the UI using the "Manage" Button:
Further information about the assistant app will be found here:
Assistant App Features
To investigate the status of apps on an APPHOST with Release 7.3.x you could use so far the following cli command to get the following output displayed:
- /opt/qradar/support/recon ps
The recon ps command disappeared for example with 7.4.1FP2! At the latest from this release you’ll have to be aware about the qappmanager support utility (details stated below). Similar context will be called for example in Release 7.4.1FP2 by the following commands:
- docker images
- docker ps
The qappmanager utility was introduced with QRadar Release 7.4.0. The current status and helpful context of applied apps now can be shown with the new support tool.
It has to be executed from the CONSOLE and provides many options to maintain, start, stop, delete or create new instances of apps:
- /opt/qradar/support/qappmanager
Further support information about the qappmanager support utility will be found here:
qappmanager utility
Finaly in rare cases, in cases of scripting or integration with other systems you can use the API as well. It's well documented and for example straight forward to start or stop an app using the API:
Using the "Try Button":
So concluding for me, it’s exiting to chase the continuous enhancements of QRadar and specifically the app management stuff. The support utilities to manage apps are more and more easily operated supporting app extension management.
#Highlights
#Highlights-home
#QRadar
0 comments
1779 views
Permalink
Additional
Resources
Discover these carefully selected resources to dive deeper into your journey and unlock fresh insights
Office
If you need immediate assistance please contact the Community Management team
support@communitysite.ibm.com
Monday - Friday: 8AM - 5 PM MT
Quick Links
About Us
Terms of Use
Community Netiquette
Sitemap
FAQ
Community
- Security
- Topic groups
- IBM Cloud Pak for Security
- IBM Security Global Forum
- IBM Guardium
- IBM MaaS360
- IBM QRadar
- IBM QRadar SOAR
- IBM Trusteer
- IBM Verify
- IBM Z Security
- Groups
- AI
- Automation
- Data
- Security
- Sustainability
- Cloud
- Power
- Storage
- IBM Japan
- All Groups
- Champions
- User groups
- Security user groups
- All user groups
- Events
- IBM TechXchange Conference
- Upcoming Security Events
- IBM TechXchange Webinars
- All IBM TechXchange Community Events
- Participate
- Welcome Corner
- Blogging in the Community
- Directory
- Community Leaders
- Resources
- Gamification
- Marketplace