IBM Security QRadar

 View Only
Expand all | Collapse all

Log Source Management extension disappeared from admin tab

  • 1.  Log Source Management extension disappeared from admin tab

    Posted Mon June 05, 2023 07:27 AM

    I use qradar community edition 7.3.3. I installed the Log Source Management extension which worked perfectly and was showing on the admin tab.  After some days, It has disappeared from the admin tab. All attempts including uninstall and reinstall have not brought it back to the admin tab.

    I am unable to access the it.



    ------------------------------
    Michael Akandi
    ------------------------------


  • 2.  RE: Log Source Management extension disappeared from admin tab

    Posted Tue June 06, 2023 03:55 AM

    Hi Michael,

    Make sure the application is locked or unlocked.  Use the below query to check.

    psql -U qradar -c "select id,name,status,task_status,lock,errors from installed_application;"

    Note: The 'lock' field has a timestamp of when the app was locked. The 'status' is "RUNNING".
     
    Resolving The Problem
    To unlock any of the Apps, which have a date and time stamp in their "Lock" column.
     
    Using an SSH session login to the Console as the root user.
    Type the command: 
    psql -U qradar -c "update installed_application set lock=null where id=<application id>;"


    ------------------------------
    Arunkumar R
    ------------------------------