IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Issue Accessing Rules in Use Case Manager

    Posted Fri February 28, 2025 05:03 AM

    Hi Team,

    We are facing issue for use case manager. We able to access the use case manager, but if we try to click or open any rules we are getting below error. 

    "An error occurred: No rules were returned. You might not have enough permissions to view these rules, or they might be temporarily out of sync."

    We have already opened a case with IBM Support, but they have not been able to identify the issue yet. Here are the steps we have already taken to troubleshoot the problem:

    1. Stopped and restarted the UCM APP service.

    2. Restarted the UCM container service.

    3. Increased the memory allocated to the UCM app

    4. Upgraded the app to the latest version (4.0.0)

    5. We synced QID record and synced DSM event mappings

    Please assist as to resolve this issue.

    Regards,

    Aby Francis



    ------------------------------
    Aby Francis
    ------------------------------


  • 2.  RE: Issue Accessing Rules in Use Case Manager

    Posted Sat March 08, 2025 02:01 PM

    Hi,

    Have you tried to reinstall app? Are you facing issues with other apps also?

    I also faced sync issues, sometime this app returns only partial results even after full sync.



    ------------------------------
    Abdul Quadeer
    ------------------------------



  • 3.  RE: Issue Accessing Rules in Use Case Manager

    Posted Fri March 14, 2025 09:04 AM

    Hi,

    We have reinstalled the application and also upgraded to the latest version. We are not experiencing any issue with other apps.



    ------------------------------
    Aby Francis
    ------------------------------



  • 4.  RE: Issue Accessing Rules in Use Case Manager

    Posted Fri March 14, 2025 02:58 PM
    Edited by Abdul Quadeer Fri March 14, 2025 02:58 PM

    Ok. Try accessing ucm by logging to another account that has same access. This is to rule out any account related issue.



    ------------------------------
    Abdul Quadeer
    ------------------------------