Upgrade a LogRhythm HA + DR Combined Solution

This document describes the upgrade procedure for LogRhythm High Availability + Disaster Recovery (HA + DR) systems from the previous version of LogRhythm SIEM to the current version using the LogRhythm Database Upgrade Tool and the LogRhythm Install Wizard. The LogRhythm Database Upgrade Tool updates the LogRhythm databases only. The LogRhythm Install Wizard is used to upgrade the software components.

Before You Begin

This document should only be used to upgrade LogRhythm HA+DR systems on version 7.4.x or later.

• If your deployment includes LogRhythm's HA solution version 7.3.x or earlier, you may not

  upgrade your LogRhythm software to the current version using this document. Obtain the appropriate

  software and upgrade guides from the

  LogRhythm Community, and then upgrade to 7.4.x using

  that guide.

• If you are upgrading a standard LogRhythm deployment, see the LogRhythm Upgrade Guide

  that is appropriate for your current version.

• If your deployment includes LogRhythm's Disaster Recovery (DR) solution, see the LogRhythm Disaster Recovery Upgrade Guide that is appropriate for your current version.

• Web Console upgrades from 6.1 and 6.2 deployments to a current-version deployment are not supported. If you

  have a LogRhythm Web Console 6.1.x or 6.2.x deployment, do not upgrade to the current version of LogRhythm SIEM. Uninstall your Web

  Console according to the instructions in the Installation Guide for your version. Then complete a fresh

  installation according to the instructions in Install a New LogRhythm Deployment.

Existing Components

This upgrade guide describes how to update the following LogRhythm components:

• Alarming and Response Manager

• Job Manager

• Mediator Server

• Client Console

• AI Engine

• All LogRhythm Databases

• Data Indexer

• LogRhythm Knowledge Base

• (Optional) All Windows System Monitor Agents

• (Optional) All *NIX System Monitor Agents