The rule editor can not add new condition or modify existing values. Besides, the 'next' button was disabled (grayed out).

This start happening after upgrading from 7.4.3 fixpack 2 to fixpack 5.

Very appreciate for any input.

Hi Alex, this is due to a incompatibility with chrome and internet explorer. At the moment only firefox will allow you to update rules. Hopefully a change in the browsers or a QRadar Software fix will make rule editing available again.

It would have been helpful to receive a flash notification about this issue. Not everyone uses Firefox.

The Error is fixed in QRadar 7.5.0 UP2 IF01

see https://www.ibm.com/support/pages/apar/IJ40380

how about 7.4.3 ?

Unfortunately we could not find any fix for 7.4.3 and had to upgrade to 7.5.0.

Try it first on a test installation. We experienced the issue in IF01 that the next button is now available but on the next page in the editor the button of the configuration (starting from remove from refset) and e-mail notification setting is no longer visible or available.

Found out that the issue with e-mail notification and missin configuration option at the button was present on that installation bevore the update so might not be related to the software update.