QRadar ‐ License extension - mluchettii/internship-portfolio GitHub Wiki

Table of Contents

How to extend the QRadar CE license

Download the license

Go to the download page for IBM QRadar CE and click on download

Scroll down and click on the download link next to the .key file

Upload the license

On QRadar, click on the Admin tab and then click on System and License Management

Click Upload License

Here, select the file and click Upload

Allocate the license

Click on the display dropdown and click on Licenses

Make sure to click on the QRadar host, and then click Allocate System to License

Confirm that you want to overwrite the current license

Deploy the license

Click Deploy License Changes

Back on the Licenses page, notice that the key has been overwritten and now expires on Sep 30, 2025

Double click on any license to see more detailed information about it

Troubleshooting

"The EPS or FPM license pool is over-allocated. Please contact your administrator."

This message may appear on some pages after deploying a new license, making the SIEM unusable

To resolve this, open the System and License Management menu and click on License Pool Management

Edit the EPS Allocation and FPM Allocation fields, change both to 0:

Problem solved, SIEM is fully functioning again