IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

rule wizard not closing and not saving changes in rules at all

  • 1.  rule wizard not closing and not saving changes in rules at all

    Posted Sun January 30, 2022 11:42 AM

    Hello,

    I 'm running qradar 7.4.3 FP4 IF02.

    If I edit a rule, the rule wizard is not closing. Changes are not saved, the rule wizard windows only goes away if I reload the page (empty cache).

    Here is the entry from qradar.log:

    Jan 30 11:31:58 ::ffff:192.168.46.104 [tomcat.tomcat] [sreimerSupport Member(4729) /console/do/rulewizard] com.q1labs.qvm.workflow.processor.ws.QVMUtil: [INFO] [NOT:0000006000][192.168.46.104/- -] [-/- -]Get QVM Service onDemandService

    [...]

    Jan 30 11:31:58 ::ffff:192.168.46.104 [tomcat.tomcat] [sreimerSupport Member(4729) /console/do/rulewizard] org.apache.jsp.sem.jsp.ruleWizard.RuleWizard_002daction_jsp: [ERROR] [NOT:0000003000][192.168.46.104/- -] [-/- -]Could not forward to exception page, possibly an

    included JSP?

    Any suggestions? I did not use CMT but have installed Analyst Workflow and Use Case Manager (and others like RefSet Management,...very basic).

    Best Regards

    Stefan



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: rule wizard not closing and not saving changes in rules at all

    Posted Sun January 30, 2022 11:43 AM

    Tested on Chrome and FF (current release, no cache)



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: rule wizard not closing and not saving changes in rules at all

    Posted Tue February 01, 2022 07:22 AM

    Hi Stefan,

    i would consider to do a full deploy configuration. This causes interdependent services to restart. If that doesn't help, to be on the safe side, I would open a support ticket..

    Regards,

    Ralph



    #QRadar
    #Support
    #SupportMigration


  • 4.  RE: rule wizard not closing and not saving changes in rules at all

    Posted Mon February 07, 2022 09:53 AM

    I did a fresh install to resolve the issue



    #QRadar
    #Support
    #SupportMigration