IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  VCLOUD Director integration

    Posted 05/11/20 02:57 PM
    Hello everyone,
    I'm having trouble collecting VCloud Director logs. The configuration is good but I get the error message:
    "ERROR - Unable to obtain query service from vCloud server!"

    I looked at the qradar.error log file and noticed the following error lines:

    May  8 15:01:52 ::ffff:10.137.18.232 [ecs-ec-ingress.ecs-ec-ingress] [Thread-3182429] com.q1labs.semsources.sources.vcloud.VmWareVCloudProvider: [ERROR] [NOT:0070003100][10.137.18.232/- -] [-/- -]An error occured when trying to configure a source connection for provider class com.q1labs.semsources.sources.vcloud.VmWareVCloudProvider203

    May  8 15:01:52 ::ffff:10.137.18.232 [ecs-ec-ingress.ecs-ec-ingress] [Thread-3182429] com.q1labs.semsources.sources.vcloud.VmWareVCloudProvider: [ERROR] [NOT:0000003000][10.137.18.232/- -] [-/- -]Unable to logout of vCloud API Client:

    May  8 15:01:52 ::ffff:10.137.18.232 [ecs-ec-ingress.ecs-ec-ingress] [Thread-3182429] com.q1labs.semsources.sources.vcloud.VmWareVCloudSource: [ERROR] [NOT:0070003100][10.137.18.232/- -] [-/- -]There appears to be a configuration issue with the provider connection 'class com.q1labs.semsources.sources.vcloud.VmWareVCloudProvider203'.

    Could the problem be related to the vcloud DSM?



    ------------------------------
    Famara Bodian
    ------------------------------


  • 2.  RE: VCLOUD Director integration

    Posted 05/12/20 09:18 AM
    Hi Famara,

    The latest versions of VCloud Director no longer support certain APIs that our VCloud protocol uses, we have had a few reports of this same problem. We have updated the protocol to be compatible with the new APIs and it is in an early beta test now. You could log a support case if you want want to be notified of when the fix is released.

    Cheers
    Colin

    ------------------------------
    COLIN HAY
    IBM Security
    ------------------------------



  • 3.  RE: VCLOUD Director integration

    Posted 05/15/20 07:53 PM
    Hello Colin,
    Thank you for the info. I hope the new version will be out very soon

    ------------------------------
    Famara Bodian
    ------------------------------

    Original Message


  • 4.  RE: VCLOUD Director integration

    Posted 05/18/20 09:15 AM
    Hello Colin,
    I can also confirm the same issue. Case reported as TS003716326. New DSM would be appreciated.

    Regards,

    Petr

    ------------------------------
    Petr Hejda
    ------------------------------

    Original Message


Related Content