IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  VCLOUD Director integration

    Posted Mon May 11, 2020 02:57 PM
    Hello everyone,
    I'm having trouble collecting VCloud Director logs. The configuration is good but I get the error message:
    "ERROR - Unable to obtain query service from vCloud server!"

    I looked at the qradar.error log file and noticed the following error lines:

    May  8 15:01:52 ::ffff:10.137.18.232 [ecs-ec-ingress.ecs-ec-ingress] [Thread-3182429] com.q1labs.semsources.sources.vcloud.VmWareVCloudProvider: [ERROR] [NOT:0070003100][10.137.18.232/- -] [-/- -]An error occured when trying to configure a source connection for provider class com.q1labs.semsources.sources.vcloud.VmWareVCloudProvider203

    May  8 15:01:52 ::ffff:10.137.18.232 [ecs-ec-ingress.ecs-ec-ingress] [Thread-3182429] com.q1labs.semsources.sources.vcloud.VmWareVCloudProvider: [ERROR] [NOT:0000003000][10.137.18.232/- -] [-/- -]Unable to logout of vCloud API Client:

    May  8 15:01:52 ::ffff:10.137.18.232 [ecs-ec-ingress.ecs-ec-ingress] [Thread-3182429] com.q1labs.semsources.sources.vcloud.VmWareVCloudSource: [ERROR] [NOT:0070003100][10.137.18.232/- -] [-/- -]There appears to be a configuration issue with the provider connection 'class com.q1labs.semsources.sources.vcloud.VmWareVCloudProvider203'.

    Could the problem be related to the vcloud DSM?



    ------------------------------
    Famara Bodian
    ------------------------------


  • 2.  RE: VCLOUD Director integration

    Posted Tue May 12, 2020 09:18 AM
    Hi Famara,

    The latest versions of VCloud Director no longer support certain APIs that our VCloud protocol uses, we have had a few reports of this same problem. We have updated the protocol to be compatible with the new APIs and it is in an early beta test now. You could log a support case if you want want to be notified of when the fix is released.

    Cheers
    Colin

    ------------------------------
    COLIN HAY
    IBM Security
    ------------------------------



  • 3.  RE: VCLOUD Director integration

    Posted Fri May 15, 2020 07:53 PM
    Hello Colin,
    Thank you for the info. I hope the new version will be out very soon

    ------------------------------
    Famara Bodian
    ------------------------------



  • 4.  RE: VCLOUD Director integration

    Posted Mon May 18, 2020 09:15 AM
    Hello Colin,
    I can also confirm the same issue. Case reported as TS003716326. New DSM would be appreciated.

    Regards,

    Petr

    ------------------------------
    Petr Hejda
    ------------------------------