IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  QRadar 7.5.0 UP5 | Console UI Access Issue | No license Key was detected message

    Posted Mon April 17, 2023 05:43 AM

    https://www.ibm.com/support/pages/apar/IJ44135

    Hi all,

    just to keep you all informed..
    This morning I got a call from a customer that the console was no longer working. The message "invalid license key" no license key was detected appears.
    A quick search revealed that there is an APAR for this! Details here: https://www.ibm.com/support/pages/apar/IJ44135
    According to APAR, this issue has been fixed with 7.5.0 UP5. Unfortunately that doesn't seem to be the case...
    The good news is that the tomcat restart as described solved the problem :)


    ------------------------------
    Ralph Belfiore
    SIEM Expert
    pro4bizz GmbH
    Karlsruhe
    +4972190981727
    ------------------------------


  • 2.  RE: QRadar 7.5.0 UP5 | Console UI Access Issue | No license Key was detected message

    Posted Tue April 18, 2023 08:07 AM

    Good one Ralph, we have indeed seen this one!!  Even asked support about it on an unrelated call, with someone in the wrong group to answer; of course they had never heard of it. 

     

    Frank Eargle  | Security Architect, Security Services

    GlassHouse Systems | Tel: +1 (416) 229-2950  x323 | Mobile: +1 (803) 237-4497 | www.ghsystems.com

    markerlinkedin-icon_128x128cidimage003.jpg@01D816A5.CD508210 facebook logo2

     




    Original Message


  • 3.  RE: QRadar 7.5.0 UP5 | Console UI Access Issue | No license Key was detected message

    Posted Wed April 19, 2023 03:44 PM
    Edited by Jonathan Pechta Wed April 19, 2023 03:44 PM

    This issue is it was tied to a race condition where multiple threads were attempting to access the session context. If you repeatedly experience the "No license key was detected. Either the license key is invalid, or has not been deployed" error, we might need to investigate further and confirm. 

    As this is a race condition, code was updated to catch the issue. If this is a one-off error and you do not see it regularly, a tomcat restart will correct the problem and clear the error. However, if you see it more than twice in a week, might need to log a case so we can run threadtop for tomcat, run a get_logs before the tomcat cache is cleared, enable debug for some classes, then grab a second set of logs for comparison purposes. As support will need to look at the state of Tomcat before and after the Tomcat is started. We can then engage development to dig deeper if we can reproduce and potentially reopen the APAR. 



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message


  • 4.  RE: QRadar 7.5.0 UP5 | Console UI Access Issue | No license Key was detected message

    Posted Fri April 21, 2023 01:57 PM

    Hi Ralph,

    Thank you for notifying us.
     
    I noticed that the APAR [IJ44135] is reported for 7.4.3 only, however, I faced this issue today on: 7.5.0 UpdatePackage 4 Interim Fix 1.
    It is fixed by restarting tomcat as described in the APAR.

    Lets hope threads can execute in harmony until patched. :)



    ------------------------------
    Ziad Alsulami
    ------------------------------

    Original Message


Related Content