IBM QRadar: Principais Comandos e Arquivos: Difference between revisions
No edit summary |
No edit summary |
||
Line 10: | Line 10: | ||
|- support | |- support | ||
| |- qappmanager -> verify status of all apps | | |- qappmanager -> verify status of all apps | ||
|- upgrade | |||
| |- util | |||
| | |- setup | |||
| | | |- upgrades | |||
| | | | |- do_deploy.pl -> deploy events for | |||
|- conf | |- conf | ||
Revision as of 01:31, 29 January 2025
Principais arquivos
A instalação padrão fica no diretório:
/opt/qradar/ |- bin/ | |- qchange_netsetup -> Realiza a troca de IP, DNS, ... | |- logrun.pl -> Send logs to qradar | |- ariel_query -> Run a Ariel query from command line. |- support | |- qappmanager -> verify status of all apps |- upgrade | |- util | | |- setup | | | |- upgrades | | | | |- do_deploy.pl -> deploy events for |- conf
Commands
ariel_query
ariel_query --no-verify -u admin --output table --query "select QIDNAME(QID) from EVENTS limit 10"