Before you install the QRadar Use Case Manager app, ensure that it meets the
minimum memory (RAM) requirements. QRadar Use Case Manager requires 500 MB
of free memory from the application pool of memory. If QRadar Use Case
Manager fails to install, then your application pool does not have enough
free memory to run the app. Consider adding an App Host to
your QRadar deployment. For more information about calculating the required
memory, see Apps and Resource Limitation.
QRadar 7.3.2 or later uses an App Host, which is a managed host, that is
dedicated to running apps. App Hosts provide extra storage, memory, and CPU
resources for your apps without impacting the processing capacity of your
QRadar Console. For more information, see https://www.juniper.net/documentation/en_US/jsa7.4.2/jsa-administration-guide/topics/concept/concept-jsa-admin-app-host.html.
Use the QRadar Extensions Management tool or the
QRadar Assistant app to install the QRadar Use Case Manager app on your QRadar Console.
- Choose one of the following methods to download your app:
- If you downloaded the app from the App Exchange, complete
the following steps:
On the QRadar Console, click Admin
>Extensions Management.
In the Extension Management window, click Add and select the app archive that you want to upload to the
console.
Select the Install immediately checkbox.
Note: You might have to wait several minutes before your app
becomes active.
To preview the contents of an app after it is added
and before it is installed, select it from the list of extensions,
and click More Details. Expand the folders to view the
individual content items in each group.
- If IBM QRadar Advisor with Watson is installed
in your environment, it includes the Cyber Adversary Framework
Mapping app. This MITRE-mapping app is no longer needed when
you install QRadar Use Case Manager 2.3.0 or later. To
remove the Cyber Adversary Framework Mapping app, follow
steps 5 and 6 in Upgrading QRadar Use Case Manager.
If the app installed successfully, you see it listed as
'Installed' on the
Extensions Management page of the
Admin tab. If the app didn't install correctly, see
QRadar apps troubleshooting.