IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  IP table not working

    Posted 07/19/23 09:21 AM

    Hello Team,

    While doing test upgrade one of our device got failed. It showing IP table invalid so I tried to restart but there was error iptables.service not found. I also rebooted the system but result is negetive. Any idea how tor solve this issue. Can i upgrade the device without issue. Current version 7.5 UP 2. Going to upgrade for UP 6.  Attachment of error posted



    ------------------------------
    ST
    ------------------------------


  • 2.  RE: IP table not working

    Posted 07/20/23 12:19 AM

    Hi Khaleel,

    If iptables.service is not found, then this will lead to more problems.  The iptables service unit file is provided by the package iptables-services.  Also, it packages the ip6tables service unit as well.  That would need some more investigation why iptables.service is missing.

    I would suggest you to open up a support case and upload a get_logs (with -S) from console and the problematic server where iptables.service is missing.

    /opt/qradar/support/get_logs -S



    ------------------------------
    Prabir Meher
    ------------------------------



  • 3.  RE: IP table not working

    Posted 07/20/23 01:11 AM

    Thankyou Prabir for your post. Can I try upgrade the console and other collectors individually or I can try upgrade all devices from the console! which one you suggest?



    ------------------------------
    Khaleel Ebrahim
    ------------------------------

    Original Message


  • 4.  RE: IP table not working

    Posted 07/21/23 09:00 AM

    The choice to patch 'all' vs updating the Console, then updating appliances in parallel comes down to the length of the maintenance window. Your Console upgrade must finish before you attempt to update any other appliances in the network. However, after the Console upgrade completes, you can then update all other appliances at the same time, saving you downtime. 

    As all appliances need to match the Console's version, the Console is the primary host to update first and ensure it is successful. If not, you need to contact support if the upgrade has any issues. 



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message


  • 5.  RE: IP table not working
    Best Answer

    Posted 07/24/23 01:20 AM

    Found out that iptable.service was renamed. When I changed it back and restarted the daemon all worked.



    ------------------------------
    Khaleel Ebrahim
    ------------------------------



Related Content