IBM Security QRadar

 View Only
Expand all | Collapse all

QRadar upgrade from 7.3.3 FP8 to 7.4.1 FP 1 issues

  • 1.  QRadar upgrade from 7.3.3 FP8 to 7.4.1 FP 1 issues

    Posted Mon November 22, 2021 01:08 PM
    We are running a virtualized AIO with all default settings. As a POC for the client we tried running their configuration, i.e QRadar  7.3.3 FP8 and are now trying to upgrade to 7.4.1 FP 1. We proceeded with the upgrade and we are have been stuck at the "Applying post patch script (26/282)" for over 24 hours. Leading up to the issue, every step went smoothly.
    The screenshot is attached with the case.
    We have been suspecting that this might due to the ESXi's CPU usage being almost at its limit. However, QRadar itself is at a stable 80-90% usage.
    Is anyone facing the same issue? Any solutions?

    ------------------------------
    Nilaa Maharjan
    ------------------------------


  • 2.  RE: QRadar upgrade from 7.3.3 FP8 to 7.4.1 FP 1 issues

    IBM Champion
    Posted Wed November 24, 2021 06:06 AM
    Hello @Nilaa Maharjan ,

    I guess the process is terminated now :)

    The screenshot indicate you are migrating to 7.4.3FP1 and not 7.4.1FP1.

    Strange that you are trying to upgrade to 7.4.3FP1 instead of FP2. (QRadar users with domains must install 7.4.3 Fix Pack 2, do not install a prior 7.4.3 version.)
    Latest patch is FP4 / https://www.ibm.com/community/qradar/home/software/

    For experiencing four migrations since this summer to 7.4.3FP2, the best way is to follow the logs (more verbosity) to see what happen during the process.

    Take a look in parallel (on another session when it seems you are beeing stuck) at these files one the setup patch folder (/var/log/setup-20XXXXXXX) you have more verbosity depending of what is in progress :
    • patches.log
    • reset-qradar-ca.log

    Looking at your screenshot, seems you are stuck on the PKI regeneration process witch is very long.

    I don't know the sizing of your VIO and if you are on a san.
    From my last upgrade (7.3.3FP2 to 7.4.3FP2) the process of migration took (3h30) on an HA appliance XX29 and 1 hour for each MH.

    If you have access to the support, you can create a case, they are very fast and efficient during a migration.

    Hope this helps or give you some ideas.

    Regards,
    Zoldax







    ​

    ------------------------------
    @zoldax

    https://www.youracclaim.com/users/pascal-weber.029e134d/badges
    ------------------------------

    Original Message