IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  QRadar Log Source Management installation error

    Posted Wed October 07, 2020 10:34 AM

    Hello,

    I uninstalled the QRadar Log Source Management. Now I want to reinstall it but I receive the following error:

    The UUID in the application manifest.json file is already in use by another app.

    How can I proceed?



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: QRadar Log Source Management installation error

    Posted Wed October 07, 2020 11:48 AM

    I resolved editing manifest.json on .zip file



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: QRadar Log Source Management installation error

    Posted Wed November 11, 2020 10:23 AM

    Hello,

    I also encountered the same issue.

    Could you please describe the solution in detail how you resolved it.


    Thank you in advance.



    #QRadar
    #Support
    #SupportMigration


  • 4.  RE: QRadar Log Source Management installation error

    Posted Wed November 11, 2020 10:32 AM

    Hi,

    You have to open the extension archive and modify the manifest.json file.

    At the end of file there are:

    "uuid": "xxxxxxxxxxxxxxxxxxxx"

    if you change the uuid the installation will be ok.



    #QRadar
    #Support
    #SupportMigration


  • 5.  RE: QRadar Log Source Management installation error

    Posted Wed November 11, 2020 10:37 AM

    Hi,

    You have to open the extension archive and modify the manifest.json file.

    At the end of file there are:

    "uuid": "xxxxxxxxxxxxxxxxxxxx"

    if you change the uuid the installation will be ok.



    #QRadar
    #Support
    #SupportMigration


  • 6.  RE: QRadar Log Source Management installation error

    Posted Thu November 12, 2020 02:43 AM

    Thanks davide,


    I have tried another solution and it resolved this issue.

    First, I deleted app_id with ERROR status from installed_application table (for example 1003 - Deployment Intelligence).

    [root~]# psql -U qradar -c 'select id,name,status from installed_application'

     id |        name        | status

    ------+-----------------------------------+-----------

     1005 | User Analytics          | ERROR

     1003 | Deployment Intelligence      | ERROR

     1356 | threatglobe.name         | COMPLETED

    (3 rows)


    [root~]# psql -U qradar -c "delete from installed_application where id='1003';"

    DELETE 1

    [root~]#

    [root~]# psql -U qradar -c 'select id,name,status from installed_application'

     id |        name        | status

    ------+-----------------------------------+-----------

     1005 | User Analytics          | ERROR

     1355 | pulse.full_name          | COMPLETED

    (2 rows)


    Then, I reinstalled successfully Deployment Intelligence app.


    I hope this is helpful.




    #QRadar
    #Support
    #SupportMigration