IBM QRadar

​Hi All,

We have received below notification, I need to understand the exact issue here, We have few apps installed in our environment like app for big fix, Qualys app, app for service now,

"Problem: One or more of your installed Apps may be malfunctioning and require a full deploy.
Duration (or ongoing): ongoing
Customer Action required: Please do a full deploy at your earliest convenience."


I need to understand the issue so I can provide proper reply.


Regards
Asif Siddiqui

------------------------------
asif siddiqui
------------------------------

Hi @asif siddiqui,

I assume you got this notification as a part of QRoC setup.

This just means that one of your app needs a configuration reload which would require a full deploy. You do not need to reply anything. You just need to Deploy Full Configuration which is in Admin tab > Advanced > Deploy Full Configuration whatever time suits you.

NOTE : Remember this will restart services except tomcat and hostcontext (UI will be available though). This means the event collection will be stopped for a brief moment but all the events will be buffered by the ecs-ec-ingress service and will be forwarded once ep is ready to recieve events and you will see a small spike in the events.​​

------------------------------
Chinmay Kulkarni
------------------------------

Original Message:
Sent: Sun December 15, 2019 12:33 AM
From: asif siddiqui
Subject: Notification received

​Hi All,

We have received below notification, I need to understand the exact issue here, We have few apps installed in our environment like app for big fix, Qualys app, app for service now,

"Problem: One or more of your installed Apps may be malfunctioning and require a full deploy.
Duration (or ongoing): ongoing
Customer Action required: Please do a full deploy at your earliest convenience."


I need to understand the issue so I can provide proper reply.


Regards
Asif Siddiqui

------------------------------
asif siddiqui
------------------------------

​Hi Chinmay,

Yes I did full deploy changes from my console and I got confirmation from team that all apps are working fine.


Regards
Asif Siddiqui

------------------------------
asif siddiqui
------------------------------

Original Message:
Sent: Mon December 16, 2019 03:41 AM
From: Chinmay Kulkarni
Subject: Notification received

Hi @asif siddiqui,

I assume you got this notification as a part of QRoC setup.

This just means that one of your app needs a configuration reload which would require a full deploy. You do not need to reply anything. You just need to Deploy Full Configuration which is in Admin tab > Advanced > Deploy Full Configuration whatever time suits you.

NOTE : Remember this will restart services except tomcat and hostcontext (UI will be available though). This means the event collection will be stopped for a brief moment but all the events will be buffered by the ecs-ec-ingress service and will be forwarded once ep is ready to recieve events and you will see a small spike in the events.​​

------------------------------
Chinmay Kulkarni

Original Message:
Sent: Sun December 15, 2019 12:33 AM
From: asif siddiqui
Subject: Notification received

​Hi All,

We have received below notification, I need to understand the exact issue here, We have few apps installed in our environment like app for big fix, Qualys app, app for service now,

"Problem: One or more of your installed Apps may be malfunctioning and require a full deploy.
Duration (or ongoing): ongoing
Customer Action required: Please do a full deploy at your earliest convenience."


I need to understand the issue so I can provide proper reply.


Regards
Asif Siddiqui

------------------------------
asif siddiqui
------------------------------