Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Installing the QRadar Analyst Workflow


You can install QRadar Analyst Workflow on JSA 7.4.0 or later.

If you previously installed a version of the workflow, make sure that you remove any folders created during that installation process.

  1. If you have custom certificates, run the following commands on your JSA Console, in any directory:
    • update-ca-trust

    • systemctl restart docker

  2. Download the latest version of the QRadar Analyst Workflow<x.x.x>.zip file from Fix Central. See instructions on the IBM Security App Exchange.
  3. Copy the file onto your JSA host by using the Linux "secure copy" (scp) command or an FTP client.

    Secure copy example:scp QRadarAnalystWorkflow<x.x.x>.zip <QRadar host>:/<directory>

  4. Type the following command to create a new directory on the JSA host: mkdir qradar-uiNote

    If the directory exists from a previous installation, you must delete it before you extract the .zip file.

  5. To extract the latest version of the QRadarAnalystWorkflow<x.x.x>.zip file on your JSA host, type the following command:

    unzip QRadarAnalystWorkflow<x.x.x>.zip -d qradar-ui

  6. Run ./qradar-ui/, then wait for the logs to run.
  7. Access the QRadar Analyst Workflow by using one of the following methods:
    • In the navigation menu, click Try the New UI.

    • Access the new UI in your browser at https://<QRadar IP address>/console/ui.