IBM QRadar

Hello everyone,
I have finished installing ibm-java-x86_64-sdk-8.0-8.10.bin and dlc v1.8.3-1 using centos-release-7-4.1708.el7.centos.x86_64. 
I have an error after checking the dlc status: 
Sep 22 12:29:57 dlcQradar DLC[18918]: 2023-09-22 12:29:57,259 main ERROR Null object returned for file in appenders.
Sep. 22 12:29:57 dlcQradar DLC[18918]: 2023-09-22 12:29:57,272 main ERROR Could not find appender "LogSourceValidatorFileName" for logger configuration "com.ibm.si.frameworks.dlc.json".

I need your help. 
Best regards.

This issue is typically caused when the file ownership of the file /var/log/dlc/logSources.log is changed to root. When the log file permission is set incorrectly, a Java exception to be logged during the DLC service startup. 

This issue can be ignored and the errors are benign. This issue was supposed to be under review for the 1.8.3 DLC release, so I reached out to development to confirm if the file permissions issue was resolved in the lastest build. There might be a workaorund to set the permissions on the log file to ensure it goes away, but I'll need to confirm that with development. I might do a technical note on this issue, but you can ignore the error as it does not affect event collection or forwarding.

------------------------------
Jonathan Pechta
QRadar Support Content Lead
Support forums: ibm.biz/qradarforums
jonathan.pechta1@ibm.com
------------------------------