Install an IBM QRadar Interim Fix

Introduction

IBM periodically releases Interim Fixes (IFs) to address product defects, security issues, and stability improvements between scheduled maintenance releases.

This guide describes how to install an Interim Fix on a QRadar deployment, perform post-installation cleanup, and verify that the update was successfully applied across all managed hosts.

Prerequisites

Before installing an Interim Fix:

Download the appropriate .sfs update package from IBM Fix Central.
Ensure the update is compatible with your QRadar version.
Verify sufficient free space is available in /storetmp.
Schedule an appropriate maintenance window, as services may restart during the installation.

Install the Interim Fix

Download the Interim Fix package from IBM Fix Central.
Connect to the QRadar Console using SSH as root.
Create the update mount directory if it does not already exist.
```
 mkdir -p /media/updates
```
Copy the .sfs update package to the Console.

Example destination:
```
 /storetmp
```
Change to the working directory.
```
 cd /storetmp
```

Mount the update package.

 mount -o loop -t squashfs /storetmp/<interim_fix>.sfs /media/updates

Launch the installer.
```
 /media/updates/installer
```
When prompted, select:
```
 all
```
This applies the Interim Fix to all eligible managed hosts.

Post-Installation Cleanup

After the installation completes successfully:

Unmount the update package.
```
 umount /media/updates
```
Clear your web browser cache before logging back into the QRadar user interface.
Remove the .sfs package from the Console and any managed hosts where it was copied.

Verify the Installation

Run the following command from the Console to verify the Interim Fix level on all managed hosts.

/opt/qradar/support/all_servers.sh -C "/opt/qradar/bin/myver -v | grep Interim"

Verify that each appliance reports the expected Interim Fix version.

Additional Resources

IBM QRadar Fix Central
IBM QRadar Software Installation and Upgrade Documentation