IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Ariel Error when trying to get the last x minutes from log activity tab

  • 1.  Ariel Error when trying to get the last x minutes from log activity tab

    Posted Fri January 10, 2020 03:15 PM
      |   view attached
    hi all,

    I'm having a pretty new installation of an all-in-one console with build 7.3.2.20191224145010

    I'm getting the error message (see screenshot attached) when I'm stopping log activity real time feed and then trying to get the last x minutes of log activity, so pretty standard stuff. the detailed error is as follows:

    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] com.q1labs.core.ui.servlet.RemoteJavaScript: [ERROR] [NOT:0000003000][155.45.211.20/- -] [-/- -]An exception occurred while executing the remote method 'getArielSearchStatus'
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] java.lang.IllegalArgumentException: Cannot format given Object as a Number
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.ibm.icu.text.NumberFormat.format(NumberFormat.java:278)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at java.text.Format.format(Format.java:168)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.core.shared.util.FormatingUtils.getFormattedNumber(FormatingUtils.java:310)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.core.shared.util.FormatingUtils.getFormattedNumber(FormatingUtils.java:319)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.core.shared.util.FormatingUtils.formatNumber(FormatingUtils.java:258)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.core.shared.util.FormatingUtils.formatNumber(FormatingUtils.java:180)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.ariel.ui.UIArielServices.getArielSearchStatus(UIArielServices.java:2224)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:90)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at java.lang.reflect.Method.invoke(Method.java:508)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.application.ReflectiveExportedMethod.callWithContext(ReflectiveExportedMethod.java:170)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.application.ComponentExportedMethod.call(ComponentExportedMethod.java:62)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.application.ExportedMethod.call(ExportedMethod.java:146)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.core.ui.servlet.RemoteJavaScript.doGet(RemoteJavaScript.java:378)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.core.ui.servlet.RemoteJavaScript.doPost(RemoteJavaScript.java:619)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at javax.servlet.http.HttpServlet.service(HttpServlet.java:661)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.servlet.HttpServlet.service(HttpServlet.java:22)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.servlet.AddUserHeaderFilter.doFilter(AddUserHeaderFilter.java:86)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.servlet.ThreadNameFilter.doFilter(ThreadNameFilter.java:53)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.core.ui.filters.StrutsParamFilter.doFilter(StrutsParamFilter.java:41)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.postauthredirect.PostLoginRedirectFilter.doFilter(PostLoginRedirectFilter.java:70)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.auth.AuthenticationVerificationFilter.doFilter(AuthenticationVerificationFilter.java:304)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.auth.PersistentSessionFilter.doFilter(PersistentSessionFilter.java:89)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.auth.SecAuthenticationFilter.doFilter(SecAuthenticationFilter.java:132)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.ibm.si.console.cors.ProcessCorsFilter.doFilter(ProcessCorsFilter.java:159)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.encoding.AddEncodingToRequestFilter.doFilter(AddEncodingToRequestFilter.java:56)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.servlet.DestroySessionFilter.doFilter(DestroySessionFilter.java:26)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.servlet.AddHSTSHeaderFilter.doFilter(AddHSTSHeaderFilter.java:22)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at com.q1labs.uiframeworks.valve.ErrorReportValve.invoke(ErrorReportValve.java:47)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:476)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:806)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1498)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    (6791) /console/JSON-RPC/QRadar.getArielSearchStatus QRadar.getArielSearchStatus] at java.lang.Thread.run(Thread.java:812)
    any suggestions?

    Thank you,
    Stefan