Creating an extension from your app

After you deploy and test your app, you must export it as an extension to deploy it in a production environment.

About this task

The IBM® QRadar® GUI Application Framework SDK deploy command is intended for use only in test environments. To create an extension that you can use in a production environment, you must use the QRadar Content Management Tool to export your application as an extension.

Procedure

  1. Use the QRadar GUI Application Framework SDK to package and deploy your application to your QRadar Console test environment. Make sure that you obtain the application ID for your app from Application Creation Task state output that is returned when you issue the qradar_app_creator deploy command.
  2. Use SSH to log in to QRadar Console where your app is running as root user.
  3. Type the following command at the command line:

    /opt/qradar/bin/contentManagement.pl --action export --content-type 100 --id <application_ID>

    This example shows an app that has an ID of 1023.

    /opt/qradar/bin/contentManagement.pl --action export --content-type 100 --id 1023

     
    The extension is created as a .zip file in the /opt/qradar/bin folder. The file name has the following format:
    installed_application-ContentExport-YYYYMMDDhhmmss.zip

    Here is an example:

    installed_application-ContentExport-20160911141607.zip

What to do next

Download the .zip file from the /opt/qradar/bin folder on your QRadar Console. You can then use QRadar Extensions Management on the Admin tab to install your extension on your QRadar Console.

For more information about exporting apps and content in extensions, and Extensions Management, see the QRadar SIEM Administration Guide.