The recon connect command is a specific utility within the IBM QRadar App Framework command-line interface (CLI). Its designated purpose is to establish a connection to a running application container and execute a command within it. The container can be targeted using its unique application ID or by specifying its workload, service, and container name, directly matching the functionality described in the question.

A. ifconfig -a: This is a standard Linux command used to display information about network interfaces. It does not interact with QRadar application containers.

B. recon ps: This command lists the running QRadar application containers, similar to the docker ps command, but it does not execute commands inside them.

D. yum info: This is a standard Linux command for the YUM package manager, used to display information about software packages. It is unrelated to QRadar app management.

---

1. IBM QRadar SIEM Administration and Configuration Guide (V7.5.0):

Section: "Managing apps by using the recon command-line utility"

Content: This section explicitly details the usage of the recon tool. It states, "Use the connect command to run a specific command inside of a specific container, when given an app ID, or a combination of workload, service, and container." This directly confirms that recon connect is the correct command for the described task. The guide also describes recon ps as the command to "list all of the running containers on the system," differentiating its function from recon connect. (This information is found in the official product documentation for QRadar V7.5.0).

2. IBM Security Learning Academy - Course: IBM Security QRadar SIEM 7.5 Administration (BQ106G):

Module: "QRadar App Framework Administration"

Content: The courseware for QRadar administration covers command-line tools for troubleshooting and managing applications. The recon utility is highlighted, with recon connect being presented as the primary method for interacting with the shell of a running app container to perform diagnostics or execute commands.