IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Application Framework Issue - Apps Stuck In Starting

    Posted 06/16/23 12:36 PM

    Hi everyone, 

    I've had a lot of issues with the app framework in 7.5 and look forward to changes in update 6 like many of you but I have a recurring issue that I've never found the best way to address.  If systems are rebooted and I run into this race condition with health checks, many times apps will end up stuck in STARTING and i'm not totally clear about how to resolve this properly.  Anyone else have experience with this issue?  I'm assuming its a question of clearing the status and restarting the instance but I'd like some documented steps that we can use going forward.

    Thanks!

    Paul



    ------------------------------
    Paul
    ------------------------------


  • 2.  RE: Application Framework Issue - Apps Stuck In Starting

    Posted 06/17/23 12:26 PM
    Edited by Jonathan Pechta 06/17/23 12:27 PM

    There is a known issue where when all of the apps attempt to load simultaneously, then can get stuck in the STARTING state. You should be able to set the Task Status as "Completed". We always advise that you backup 'installed_applications' and 'installed_application_instances' tables before attempting to make a manual change. We have a technical note that covers this issue here, along with all of the commands required: https://www.ibm.com/support/pages/qradar-changing-status-application-fails-error-application-instance-not-required-state

    As some users are not comfortable with psql, you can request support to assist with this issue. The root cause of the problem as that as a number of apps boot at the same time, several of them can get stuck during the boot process and their state hangs in the "Starting" state. As they are starting, any attempts in the API to change the state respond with an error message as the API thinks it should wait for the COMPLETED state before making any changes. 

    The tech note I linked covers all of the steps though. If you get stuck or want help being the weekend you'd need to open a Sev1 case if you need further help as the weekend support teams only work Severity 1 cases.

    Edit: Forgot to set the link to open in a new window, instead of taking you away from the forums. 



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------



  • 3.  RE: Application Framework Issue - Apps Stuck In Starting

    Posted 06/20/23 11:00 AM

    Thanks Jonathan, perfect execution as usual :P



    ------------------------------
    Paul
    ------------------------------