IBM QRadar: Principais Comandos e Arquivos: Difference between revisions

From Wiki
No edit summary
No edit summary
Line 10: Line 10:
  |- support
  |- support
  |  |- qappmanager                    -> verify status of all apps
  |  |- qappmanager                    -> verify status of all apps
|- upgrade
|  |- util                   
|  |  |- setup
|  |  |  |- upgrades
|  |  |  |  |- do_deploy.pl          -> deploy events for
  |- conf
  |- conf



Revision as of 01:31, 29 January 2025

Principais arquivos

A instalação padrão fica no diretório:

/opt/qradar/
|- bin/
|  |- qchange_netsetup                -> Realiza a troca de IP, DNS, ...
|  |- logrun.pl                       -> Send logs to qradar
|  |- ariel_query                     -> Run a Ariel query from command line.
|- support
|  |- qappmanager                     -> verify status of all apps
|- upgrade
|  |- util                     
|  |  |- setup
|  |  |  |- upgrades
|  |  |  |  |- do_deploy.pl           -> deploy events for 
|- conf

Commands

ariel_query

ariel_query --no-verify -u admin --output table --query "select QIDNAME(QID) from EVENTS limit 10"

Ver também