We are running latest 7.5 update and have reached out to support as recommended. Still awaiting their response. BTW, thank you for the initial response, I truly appreciate the help and insight.
Original Message:
Sent: Thu February 15, 2024 08:59 AM
From: Jonathan Pechta
Subject: error installing QRadar Assistant - QRadar 7.3.3 FP10+/7.4.3 FP3+
If you are seeing No host supplied, I'm guessing that there is a problem with the CONSOLE_FQDN value in nva.conf. The applications have environment variables in them that all the applications to poll back to the Console.
If you SSH to your Console and navigate to /opt/qradar/conf, then type: grep FQDN nva.conf
I'm guessing that this is going to either return blank or an unexpected value. You shouldn't attempt to update this yourself, but open a case to get this resolved. Eue to the hostname being missing from nva.conf under CONSOLE_FQDN. The support rep should created a backup of nva.conf, then confirm that both the staging and deployed files to include the hostname. The support rep will then complete a full deploy and restart apps that are currently running.
What to do
- Get logs from your Console and ensure you click the application debug option as described here: https://www.ibm.com/support/pages/node/740335.
- Open a case with QRadar Support and upload the logs and describe the issue. You can link to this forum post too in the description.
- The support rep should review the environment variables to confirm the issue, properly backup your nva.conf, then ensure that the issue is resolved or fix and keystore or other issues, if apps do not start as expected.
------------------------------
Jonathan Pechta
IBM Security - Community of Practice Lead
jonathan.pechta1@ibm.com
Original Message:
Sent: Wed February 14, 2024 08:30 PM
From: stephen tangalin
Subject: error installing QRadar Assistant - QRadar 7.3.3 FP10+/7.4.3 FP3+
tried install again, and this time the installation was successful. however when opening the assistant tab, it shows internal server error
checked app.log and the following error is listed, any recommendations?
2024-02-14 13:47:51,757 [MainThread] [INFO] [APP_ID:1357] [NOT:0000006000] beat-config: setting the time for scheduled tasks.
2024-02-14 13:47:51,757 [MainThread] [INFO] [APP_ID:1357] [NOT:0000006000] beat-config: execute task:refresh_extension_cache every 10th minute hourly
2024-02-14 14:03:30,772 [MainThread] [ERROR] [APP_ID:1357] [NOT:0000003000] user_capabilites.py : can_access_endpoints : WARN : Verification of authentication token failed: Invalid URL 'https:////api/help/endpoints': No host supplied
2024-02-14 14:03:30,774 [MainThread] [INFO] [APP_ID:1357] [NOT:0000006000] Error Invalid URL 'https:////api/config/access/users?current_user=true': No host supplied
2024-02-14 14:09:36,636 [MainThread] [ERROR] [APP_ID:1357] [NOT:0000003000] user_capabilites.py : can_access_endpoints : WARN : Verification of authentication token failed: Invalid URL 'https:////api/help/endpoints': No host supplied
2024-02-14 14:09:36,637 [MainThread] [INFO] [APP_ID:1357] [NOT:0000006000] Error Invalid URL 'https:////api/config/access/users?current_user=true': No host supplied
------------------------------
stephen tangalin
Original Message:
Sent: Wed February 14, 2024 01:08 PM
From: stephen tangalin
Subject: error installing QRadar Assistant - QRadar 7.3.3 FP10+/7.4.3 FP3+
During installation, the following prompt appears,
"An error occurred installing application. Please see error logs for details.
I have collected the logs, but not sure which logs to investigate to identify the details of the error. I have looked for the extension app.log but none is created. Please lmk possible logs or help file to troubleshoot this issue.
------------------------------
stephen tangalin
------------------------------