IBM QRadar: Unlocking locked hosts

From Wiki

1) Using SSH, log in to your system as the root user

2) Unlock specific hosts by typing the following command

/opt/qradar/bin/runjava.sh com.ibm.si.security_model.authentication.AuthenticationLockoutCommandLineTool --remove-ip <host_IP_address1>

3) Unlock all hosts by typing the following command

/opt/qradar/bin/runjava.sh com.ibm.si.security_model.authentication.AuthenticationLockoutCommandLineTool --remove-all-ips


Ver também