IBM Security QRadar

 View Only
  • 1.  Cannot Install Apps

    Posted Fri July 31, 2020 10:06 AM
    Hi Community,

    whenever I try to install/uninstall Apps through Extensions Management, I get an error:

    Another preview/install/uninstall task is currently in progress, please try again later

    doing a /opt/qradar/support/recon ps
    on my App host, I get several:

    Remediations:

    A on Service qapp-1101:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    Any Ideas how to solve this issue?

    Thank you!


    Regards,
    Bruno

    ------------------------------
    Bruno Oliveira
    ------------------------------


  • 2.  RE: Cannot Install Apps

    Posted Mon August 03, 2020 12:45 AM
    Did you already tried to restart hostcontext on the Console?

    ------------------------------
    Mario Sebastiani
    ------------------------------



  • 3.  RE: Cannot Install Apps

    Posted Mon August 03, 2020 07:12 AM
    Hey Mario! Thank you! Yes. I didn't work though.



    ------------------------------
    Bruno Oliveira
    ------------------------------



  • 4.  RE: Cannot Install Apps

    Posted Mon August 03, 2020 08:26 AM
    Solved:

    the Assistant Application is stuck in a status called 'Install Previewing', the following command will change this:

    psql -U qradar -c "update content_package set content_status=6 where id=404;"



    ------------------------------
    Bruno Oliveira
    ------------------------------



  • 5.  RE: Cannot Install Apps

    Posted Wed May 19, 2021 01:05 PM
    Hello,

    Running 7.4.2 fixpack 3 I am having the same issue, but the command provided above does not help?

    ------------------------------
    Ben McHarg
    ------------------------------



  • 6.  RE: Cannot Install Apps

    Posted Fri June 25, 2021 03:37 AM

    Hello, 

    Same issue here on 7.4.2 FP3, no effect with the command.



    ------------------------------
    Alessandro Di Liberto
    ------------------------------



  • 7.  RE: Cannot Install Apps

    Posted Tue July 27, 2021 08:31 AM
    Bruno Mars, thank you for your solution!

    For those who have the same error, the application id can be found with the command:
    psql -U qradar -c "select id, name, version, hub_id, file_location, content_status from content_package;"
    And then change the status to 6 with the command above

    ------------------------------
    Denis Filatov
    ------------------------------



  • 8.  RE: Cannot Install Apps

    Posted Thu March 31, 2022 04:13 AM
    Hello Bruno and Denis, thank you for your posting. This solution did also work in my environment running 7.5.0 GA (Build 20211220195207).

    ------------------------------
    Kammerstetter Bernhard
    IBM
    (431) 211-4533 x92
    ------------------------------



  • 9.  RE: Cannot Install Apps

    Posted Wed May 18, 2022 09:19 AM
    Hello, can you help with error installing and remove extensions for qradar. i have similar situation.
    I cat'n run QRadar Log Source Management - QRadar v7.3.3 FP6+/7.4.1 FP2+? this extention not install, and not remove.
    [root@qradar dev]# /opt/qradar/support/recon ps
    &ps.StatusResult{Check:(*ps.StatusCheck)(nil), Message:"error getting response for url https://qradar.ru:9000/v1/api/workloads: Get https://qradar.ru:9000/v1/api/workloads: x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"CONMAN-CA\")", Remediation:"", Value:1}

    App-ID Name Managed Host ID Workload ID Service Name Container Name Port
    0 Failed to decode workloads - 0
    1052 pulse.full_name 53 apps qapp-1052 - 0
    1053 threatglobe.name 53 apps qapp-1053 - 0
    1001 QRadar Assistant 53 apps qapp-1001 - 0
    1054 QRadar Use Case Manager 53 apps qapp-1054 - 0
    1051 QRadar Log Source Management 53 apps qapp-1051 - 0

    Legend:

    Symbols:
    n - Not Applicable
    - - Failure
    * - Warning
    + - Success

    Checks:
    Service:
    A - Service exists in the workload file


    Remediations:

    A on Service qapp-1052:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    A on Service qapp-1053:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    A on Service qapp-1001:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    A on Service qapp-1054:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    A on Service qapp-1051:

    Confirm the host ID for this app is the same as the host ID for this host. If it is, do a deploy.

    [root@qradar dev]# psql -U qradar -c "select id, name, version, hub_id, file_location, content_status from content_package;"
    id | name | version | hub_id | file_location | content_status
    -----+---------------------------+---------+----------------------------------+-----------------------------------------------------------------+----------------
    2 | App Authorization Manager | 1.0.13 | IBMQRadar:OAuthManagement | /store/cmt/exports/20181116121207.zip | 6
    301 | extension.name | 7.0.4 | 8169c48dc992961acb8f963cdcf56faa | /store/cmt/exports/QRadarLogsourceManagement-UBI-7.0.4.zip | 5
    101 | extension.name | 2.2.3 | 9df9eb09dbbad7bd42d738cc9748b5db | /store/cmt/exports/Pulse-2.2.3-extension-signed.zip | 3
    151 | extension.name | 3.0.2 | IBM QRadar Assistant | /store/cmt/exports/QRadarAssistant-3.0.2-signed.zip | 3
    1 | extension.name | 1.1.1 | IBM QRadar Assistant | /store/cmt/exports/20181116120152.zip | 6
    51 | extension.name | 6.0.0 | 8169c48dc992961acb8f963cdcf56faa | /store/cmt/exports/logsourcemanagement-6.0.0.1194646.zip | 6
    201 | extension.name | 2.3.0 | IBMQRadar:Tuning | /store/cmt/exports/UseCaseManagerApp-2.3.0-extension.signed.zip | 3
    251 | extension.name | 7.0.4 | 8169c48dc992961acb8f963cdcf56faa | /store/cmt/exports/QRadarLogsourceManagement-UBI-7.0.4.zip | 6
    (8 rows)

    Error when i delete or install extension:
    how i can reinstall log management App?




    ------------------------------
    Alexander Rjutin
    ------------------------------