Cognos Analytics

Cognos Analytics

Connect, learn, and share with thousands of IBM Cognos Analytics users! 


#Product
#Analytics
#CognosAnalytics
#Analyticstools
#TechXchange Partner
#TechXchange Session
#TechXchange Presenter
#AI
 View Only

  • 1.  Cognosproblems after installing patch log4j

    Posted 03/17/22 09:29 AM
    Hi!
    Is there any one of you who has got problems in Cognos Analytics (11.1) after installing the patch log4j Security Vulnerabilities on your servers?
    We are having issues with the Cognossystem going down, getting slow - lagging. Server restart only helps temporarily.
    I´m not all sure that it depens om the securitypatch - just cheking if anyone elsa has got problems after the patch?

    /Leif Glaés

    ------------------------------
    Leif Glaes
    ------------------------------

    #CognosAnalyticswithWatson


  • 2.  RE: Cognosproblems after installing patch log4j

    Posted 03/17/22 10:03 AM
    Hi Leif,

    did you install the latest Interims Fix for CA 11.1 or did you apply the no-patch solution?

    ------------------------------
    Robert Dostal
    Team Leader BI
    GEMÜ
    Ingelfingen
    ------------------------------



  • 3.  RE: Cognosproblems after installing patch log4j

    Posted 03/17/22 10:09 AM
    Hi I am not a techguy, I am just a end-user/developer.



    Original Message


  • 4.  RE: Cognosproblems after installing patch log4j

    Posted 03/17/22 11:02 AM
    Hi Leif,

    in this case it's pretty hard to predict what might causes your problems.

    Let's assume that it was the latest IF and your previous installation was a bit older: the IF installer is a full upgrade that contains all fixes of all fix packs that have been released before. In this case there can be custom extensions in your environment which are causing problems. You can try to use the Cognos portal without extensions by enabling the factory mode. Start Cognos Analytics by typing the URL <webserver_name>:<port_number>/bi/?factoryMode=true     (see https://www.ibm.com/docs/en/cognos-analytics/11.1.0?topic=views-running-cognos-analytics-customized-extensions-disabled)

    Try this if it helps.

    If not then your system administrator should have a look at the cognosserver.log and cogaudit.log files and see if there are error or warning messages. What also happened in the past whilst installing an IF is an incomplete install. The files and folders are in a corrupted state and it's necessary to copy files from a backup folder.
    My advice (if possible): install CA 11.1.7 with the latest fix into a new install location, configure it like the prev installer and run the Cognos service from there. See if the problems still occur.

    ------------------------------
    Robert Dostal
    Team Leader BI
    GEMÜ
    Ingelfingen
    ------------------------------

    Original Message


  • 5.  RE: Cognosproblems after installing patch log4j

    Posted 03/18/22 05:27 AM
    Hi Robert,

    Great post that, I had an issue back in 11.1.3 with an upgrade slowing authentication down completely and it turned out to be one of the custom extensions. I think IBM fixed it in 11.1.4.

    I have patched quite a few sites with the log4j Interim Fix (beware there are two of them, you want the later one IF8). I haven't had any reliability issues reported to me.

    Regards
    Andy

    ------------------------------
    Andrew Copeland
    ------------------------------

    Original Message


  • 6.  RE: Cognosproblems after installing patch log4j

    Posted 03/20/22 04:36 PM
    Hi Leif,

    Very clear answer on your question: YES. There were several huge issues with the interim fixes (the full installer types) for Log4J. IBM re-released them a few times. It's thus important you would have used the very last install package.
    I would personally recommended to install/upgrade to the latest official pack then apply the Log4J patch manually. It is a 1mb download and it is a very simple approach, clearly explained in the included doc. Do not use Interim Fixes by IBM. They are unfortunately not very thorough these days in these releases.. The manual patch works fine, applied it to dozens of systems already in the last few months.

    ------------------------------
    Joeri Willems
    ------------------------------



  • 7.  RE: Cognosproblems after installing patch log4j

    Posted 03/21/22 10:30 AM
    Hi there,

    Did the manual patch before without issues, it is pretty simple and well explained.

    On another system recently did the 11.2.1 IF003 which includes the patch, however trying to connect to DQM sources failed.
    The p2pd_messages.log stated: Error opening zip file or JAR manifest missing: …/webapps/P2PD/WEB-INF/lib/log4jSafeAgent2021.jar

    Basically this is the file provided in the downloads for the manual patch.

    We just had to put that file in above mentioned directory.
    You never know, maybe worthwhile checking for your version.

    Cheers, M



    ------------------------------
    Matthias De Vriese
    ------------------------------



Related Content