Friday, January 27, 2017

Building an IBM QRadar Console in AWS (For version 7.2.7) - Part 2

This post basically is based on a comment from the previous post. Once again,
Special thanks to Naomi Rampersad for this entry.

The IBM website does not identify any difference in the prerequisites for whether you are configuring a Console, EP/EC or FP/FC. In fact they simply state the build for “Configuring a QRadar host on Amazon Web Service”. The document posted is an actual build of a Console and contains an imported console configuration.

With that said and as you know, dependent of how many EPS or FPM you are supporting, the compute and disk space components matter. Please see below.


AWS has different instance types (T2,M4, M3,C4,C3,X1,R4,R3,etc). The M4 instances are the latest generation of general purpose instances providing a balance of compute, memory, and network resources, and it is a good choice for many applications. We typically stick to the M4 series for our EP and FP builds. You can use m4.2xlarge or m4.4xlarge or go higher and then provision your storage accordingly.


Hope this helps!

No comments:

Post a Comment