IBM QRadar

Hi everyone, 

I've had a lot of issues with the app framework in 7.5 and look forward to changes in update 6 like many of you but I have a recurring issue that I've never found the best way to address.  If systems are rebooted and I run into this race condition with health checks, many times apps will end up stuck in STARTING and i'm not totally clear about how to resolve this properly.  Anyone else have experience with this issue?  I'm assuming its a question of clearing the status and restarting the instance but I'd like some documented steps that we can use going forward.

Thanks!

Paul

------------------------------
Paul
------------------------------

There is a known issue where when all of the apps attempt to load simultaneously, then can get stuck in the STARTING state. You should be able to set the Task Status as "Completed". We always advise that you backup 'installed_applications' and 'installed_application_instances' tables before attempting to make a manual change. We have a technical note that covers this issue here, along with all of the commands required: https://www.ibm.com/support/pages/qradar-changing-status-application-fails-error-application-instance-not-required-state

As some users are not comfortable with psql, you can request support to assist with this issue. The root cause of the problem as that as a number of apps boot at the same time, several of them can get stuck during the boot process and their state hangs in the "Starting" state. As they are starting, any attempts in the API to change the state respond with an error message as the API thinks it should wait for the COMPLETED state before making any changes. 

The tech note I linked covers all of the steps though. If you get stuck or want help being the weekend you'd need to open a Sev1 case if you need further help as the weekend support teams only work Severity 1 cases.

Edit: Forgot to set the link to open in a new window, instead of taking you away from the forums. 

------------------------------
Jonathan Pechta
QRadar Support Content Lead
Support forums: ibm.biz/qradarforums
jonathan.pechta1@ibm.com

Original Message:
Sent: Fri June 16, 2023 12:36 PM
From: Paul Goffar
Subject: Application Framework Issue - Apps Stuck In Starting

Hi everyone, 

I've had a lot of issues with the app framework in 7.5 and look forward to changes in update 6 like many of you but I have a recurring issue that I've never found the best way to address.  If systems are rebooted and I run into this race condition with health checks, many times apps will end up stuck in STARTING and i'm not totally clear about how to resolve this properly.  Anyone else have experience with this issue?  I'm assuming its a question of clearing the status and restarting the instance but I'd like some documented steps that we can use going forward.

Thanks!

Paul

------------------------------
Paul
------------------------------