IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Why am I getting " The binding handle is invalid" error on my DC log source?

  • 1.  Why am I getting " The binding handle is invalid" error on my DC log source?

    Posted Tue March 09, 2021 12:10 PM

    I have a DC log source configured on "Microsoft Security Event Log over MSRPC" protocol. I'm receiving the events from the log source but the log source is in error state and displaying error message of " The binding handle is invalid" . could someone help in this regard?

    Thanks!



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Why am I getting " The binding handle is invalid" error on my DC log source?

    Posted Sat August 14, 2021 09:33 AM

    Debug log output: The binding handle is invalid.

    As confirmed this is know issue of JNq jars, and having issue related APAR https://www.ibm.com/support/pages/apar/IJ29518

    they said there was such a thing. Workaround didn't work. We updated QRadar and Wincollect RPM packages and started to install wincollect. If you couldn't find the solution to the problem, could you check if you can update the RPM packages with auto update or manually?



    #QRadar
    #Support
    #SupportMigration