IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Cannot Install Apps

    Posted 07/31/20 10:06 AM
    Hi Community,

    whenever I try to install/uninstall Apps through Extensions Management, I get an error:

    Another preview/install/uninstall task is currently in progress, please try again later

    doing a /opt/qradar/support/recon ps
    on my App host, I get several:

    Remediations:

    A on Service qapp-1101:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    Any Ideas how to solve this issue?

    Thank you!


    Regards,
    Bruno

    ------------------------------
    Bruno Oliveira
    ------------------------------


  • 2.  RE: Cannot Install Apps

    Posted 08/03/20 12:45 AM
    Did you already tried to restart hostcontext on the Console?

    ------------------------------
    Mario Sebastiani
    ------------------------------



  • 3.  RE: Cannot Install Apps

    Posted 08/03/20 07:12 AM
    Hey Mario! Thank you! Yes. I didn't work though.



    ------------------------------
    Bruno Oliveira
    ------------------------------

    Original Message


  • 4.  RE: Cannot Install Apps

    Posted 08/03/20 08:26 AM
    Solved:

    the Assistant Application is stuck in a status called 'Install Previewing', the following command will change this:

    psql -U qradar -c "update content_package set content_status=6 where id=404;"



    ------------------------------
    Bruno Oliveira
    ------------------------------

    Original Message


  • 5.  RE: Cannot Install Apps

    Posted 05/19/21 01:05 PM
    Hello,

    Running 7.4.2 fixpack 3 I am having the same issue, but the command provided above does not help?

    ------------------------------
    Ben McHarg
    ------------------------------

    Original Message


  • 6.  RE: Cannot Install Apps

    Posted 06/25/21 03:37 AM

    Hello, 

    Same issue here on 7.4.2 FP3, no effect with the command.



    ------------------------------
    Alessandro Di Liberto
    ------------------------------

    Original Message


  • 7.  RE: Cannot Install Apps

    Posted 07/27/21 08:31 AM
    Bruno Mars, thank you for your solution!

    For those who have the same error, the application id can be found with the command:
    psql -U qradar -c "select id, name, version, hub_id, file_location, content_status from content_package;"
    And then change the status to 6 with the command above

    ------------------------------
    Denis Filatov
    ------------------------------

    Original Message


  • 8.  RE: Cannot Install Apps

    Posted 03/31/22 04:13 AM
    Hello Bruno and Denis, thank you for your posting. This solution did also work in my environment running 7.5.0 GA (Build 20211220195207).

    ------------------------------
    Kammerstetter Bernhard
    IBM
    (431) 211-4533 x92
    ------------------------------

    Original Message


  • 9.  RE: Cannot Install Apps

    Posted 05/18/22 09:19 AM
    Hello, can you help with error installing and remove extensions for qradar. i have similar situation.
    I cat'n run QRadar Log Source Management - QRadar v7.3.3 FP6+/7.4.1 FP2+? this extention not install, and not remove.
    [root@qradar dev]# /opt/qradar/support/recon ps
    &ps.StatusResult{Check:(*ps.StatusCheck)(nil), Message:"error getting response for url https://qradar.ru:9000/v1/api/workloads: Get https://qradar.ru:9000/v1/api/workloads: x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"CONMAN-CA\")", Remediation:"", Value:1}

    App-ID Name Managed Host ID Workload ID Service Name Container Name Port
    0 Failed to decode workloads - 0
    1052 pulse.full_name 53 apps qapp-1052 - 0
    1053 threatglobe.name 53 apps qapp-1053 - 0
    1001 QRadar Assistant 53 apps qapp-1001 - 0
    1054 QRadar Use Case Manager 53 apps qapp-1054 - 0
    1051 QRadar Log Source Management 53 apps qapp-1051 - 0

    Legend:

    Symbols:
    n - Not Applicable
    - - Failure
    * - Warning
    + - Success

    Checks:
    Service:
    A - Service exists in the workload file


    Remediations:

    A on Service qapp-1052:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    A on Service qapp-1053:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    A on Service qapp-1001:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    A on Service qapp-1054:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    A on Service qapp-1051:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    [root@qradar dev]# psql -U qradar -c "select id, name, version, hub_id, file_location, content_status from content_package;"
    id | name | version | hub_id | file_location | content_status
    -----+---------------------------+---------+----------------------------------+-----------------------------------------------------------------+----------------
    2 | App Authorization Manager | 1.0.13 | IBMQRadar:OAuthManagement | /store/cmt/exports/20181116121207.zip | 6
    301 | extension.name | 7.0.4 | 8169c48dc992961acb8f963cdcf56faa | /store/cmt/exports/QRadarLogsourceManagement-UBI-7.0.4.zip | 5
    101 | extension.name | 2.2.3 | 9df9eb09dbbad7bd42d738cc9748b5db | /store/cmt/exports/Pulse-2.2.3-extension-signed.zip | 3
    151 | extension.name | 3.0.2 | IBM QRadar Assistant | /store/cmt/exports/QRadarAssistant-3.0.2-signed.zip | 3
    1 | extension.name | 1.1.1 | IBM QRadar Assistant | /store/cmt/exports/20181116120152.zip | 6
    51 | extension.name | 6.0.0 | 8169c48dc992961acb8f963cdcf56faa | /store/cmt/exports/logsourcemanagement-6.0.0.1194646.zip | 6
    201 | extension.name | 2.3.0 | IBMQRadar:Tuning | /store/cmt/exports/UseCaseManagerApp-2.3.0-extension.signed.zip | 3
    251 | extension.name | 7.0.4 | 8169c48dc992961acb8f963cdcf56faa | /store/cmt/exports/QRadarLogsourceManagement-UBI-7.0.4.zip | 6
    (8 rows)

    Error when i delete or install extension:
    how i can reinstall log management App?




    ------------------------------
    Alexander Rjutin
    ------------------------------

    Original Message


Related Content