IBM QRadar

Hi community,

yesterday I discovered the following Update Issue in our lab to pretest this before going in production.

------------------------------
Ralph Belfiore
Managing Consultant | Senior SIEM Expert
connecT SYSTEMHAUS AG
Siegen
+491726365525
------------------------------

Hey Ralph,

UP9 was re-released due to an issue found that could have increased patching time.

https://www.ibm.com/support/pages/qradar-750-update-package-9-upgrade-can-experience-extended-completion-times-dt392091-resolved

You will need to upgrade your lab to the latest UP9 build (2021.6.9.20240719124908) to be able to install IF01 and any further IF's

Thanks

------------------------------
John Dawson
Qradar Support Architect
IBM

Original Message:
Sent: Thu August 01, 2024 03:38 AM
From: Ralph Belfiore
Subject: UP9 IF01 - Upgrade ERROR - This patch was meant for a different version (2021.6.9.20240719124908)

Hi community,

yesterday I discovered the following Update Issue in our lab to pretest this before going in production.

------------------------------
Ralph Belfiore
Managing Consultant | Senior SIEM Expert
connecT SYSTEMHAUS AG
Siegen
+491726365525
------------------------------

Hey Ralph,

UP9 was re-released due to an issue found that could have increased patching time.

https://www.ibm.com/support/pages/qradar-750-update-package-9-upgrade-can-experience-extended-completion-times-dt392091-resolved

You will need to upgrade your lab to the latest UP9 build (2021.6.9.20240719124908) to be able to install IF01 and any further IF's

Thanks

Hi community,

yesterday I discovered the following Update Issue in our lab to pretest this before going in production.

------------------------------
Ralph Belfiore
Managing Consultant | Senior SIEM Expert
connecT SYSTEMHAUS AG
Siegen
+491726365525
------------------------------

Hey John,

here's the part out of the Article from @Jonathan Pechta ..

Q. What if I've already upgraded to the existing UP9 and did not experience this issue, is there more software for me to install?
No, the re-release of UP9 is going to have the same build number with the exception of the timestamp at the end of the file is going to display 20240716xxxx, instead of 20240703xxxx. These are essentially the same builds with a few updated lines of code to improve the performance of the UID conversion. There is no need to update or reinstall for any reason if you already applied the original UP9 release after the re-release version is posted to IBM Fix Central.

--

In case of applying the UP9IF01 it seems to be necessary to reinstall latest release from 07/22/2024.. Right away in my lab im reinstalling the fresh downloaded UP9 and it's updating! Right after that i'll try it again with the UPIF01 Fix. I assume that it will work then. I'll keep you informed :)

Regards,

Ralph

Hey Ralph,

UP9 was re-released due to an issue found that could have increased patching time.

https://www.ibm.com/support/pages/qradar-750-update-package-9-upgrade-can-experience-extended-completion-times-dt392091-resolved

You will need to upgrade your lab to the latest UP9 build (2021.6.9.20240719124908) to be able to install IF01 and any further IF's

Thanks

Hi community,

yesterday I discovered the following Update Issue in our lab to pretest this before going in production.

------------------------------
Ralph Belfiore
Managing Consultant | Senior SIEM Expert
connecT SYSTEMHAUS AG
Siegen
+491726365525
------------------------------

Hey John,

right away in my lab UP9IF01 is running..

Sometimes it seems to be better to wait a little bit after an announcement, before applying a new update, but it's always a good option to test!
In my lab it was relatively relaxed and easy to resolve, but good to know that it works like this :)

Regards,

Ralph

Hey John,

here's the part out of the Article from @Jonathan Pechta ..

Q. What if I've already upgraded to the existing UP9 and did not experience this issue, is there more software for me to install?
No, the re-release of UP9 is going to have the same build number with the exception of the timestamp at the end of the file is going to display 20240716xxxx, instead of 20240703xxxx. These are essentially the same builds with a few updated lines of code to improve the performance of the UID conversion. There is no need to update or reinstall for any reason if you already applied the original UP9 release after the re-release version is posted to IBM Fix Central.

--

In case of applying the UP9IF01 it seems to be necessary to reinstall latest release from 07/22/2024.. Right away in my lab im reinstalling the fresh downloaded UP9 and it's updating! Right after that i'll try it again with the UPIF01 Fix. I assume that it will work then. I'll keep you informed :)

Regards,

Ralph

Hey Ralph,

UP9 was re-released due to an issue found that could have increased patching time.

https://www.ibm.com/support/pages/qradar-750-update-package-9-upgrade-can-experience-extended-completion-times-dt392091-resolved

You will need to upgrade your lab to the latest UP9 build (2021.6.9.20240719124908) to be able to install IF01 and any further IF's

Thanks

Hi community,

yesterday I discovered the following Update Issue in our lab to pretest this before going in production.

------------------------------
Ralph Belfiore
Managing Consultant | Senior SIEM Expert
connecT SYSTEMHAUS AG
Siegen
+491726365525
------------------------------

Hey Ralph,

Glad it worked for you.  You shouldn't have to re-install you should be able to just upgrade the "old" UP9 to the "new" UP9.

Thanks

John

Hey John,

right away in my lab UP9IF01 is running..

Sometimes it seems to be better to wait a little bit after an announcement, before applying a new update, but it's always a good option to test!
In my lab it was relatively relaxed and easy to resolve, but good to know that it works like this :)

Regards,

Ralph

Hey John,

here's the part out of the Article from @Jonathan Pechta ..

Q. What if I've already upgraded to the existing UP9 and did not experience this issue, is there more software for me to install?
No, the re-release of UP9 is going to have the same build number with the exception of the timestamp at the end of the file is going to display 20240716xxxx, instead of 20240703xxxx. These are essentially the same builds with a few updated lines of code to improve the performance of the UID conversion. There is no need to update or reinstall for any reason if you already applied the original UP9 release after the re-release version is posted to IBM Fix Central.

--

In case of applying the UP9IF01 it seems to be necessary to reinstall latest release from 07/22/2024.. Right away in my lab im reinstalling the fresh downloaded UP9 and it's updating! Right after that i'll try it again with the UPIF01 Fix. I assume that it will work then. I'll keep you informed :)

Regards,

Ralph

Hey Ralph,

UP9 was re-released due to an issue found that could have increased patching time.

https://www.ibm.com/support/pages/qradar-750-update-package-9-upgrade-can-experience-extended-completion-times-dt392091-resolved

You will need to upgrade your lab to the latest UP9 build (2021.6.9.20240719124908) to be able to install IF01 and any further IF's

Thanks

Hi community,

yesterday I discovered the following Update Issue in our lab to pretest this before going in production.

------------------------------
Ralph Belfiore
Managing Consultant | Senior SIEM Expert
connecT SYSTEMHAUS AG
Siegen
+491726365525
------------------------------