IBM QRadar: Unlocking locked hosts

From Wiki
Jump to navigation Jump to search

1) Using SSH, log in to your system as the root user

2) Unlock specific hosts by typing the following command

/opt/qradar/bin/runjava.sh com.ibm.si.security_model.authentication.AuthenticationLockoutCommandLineTool --remove-ip <host_IP_address1>

3) Unlock all hosts by typing the following command

/opt/qradar/bin/runjava.sh com.ibm.si.security_model.authentication.AuthenticationLockoutCommandLineTool --remove-all-ips


Ver também