IBM QRadar

Updated from 7.4 to 7.5 Update2, Admin panel is now in error state, preventing any Admin activity, Clicking on any element on the left side of the screen like "log management" gives an error "Wait for the screen to complete loading" , has anybody experienced this error, how can i troubleshoot this

Hello,

There are many things that would need to be checked. The best way forward would be to open a case with IBM Support, so that they can check all the details required.

Saying this, try and clear tomcat cache and try once -

https://www.ibm.com/support/pages/qradar-how-clear-tomcat-cache

Thanks!

Hello,

I guess you have the red triangle with an exclamation mark indicating "Application Error" when you click on the Admin tab after migration...

This is related to the depreciated centos based applications.

Open a ticket to support, they will give you a fix for this with an SQL update manipulation.

Regards,

Support Member

Hello again,

If this is a production machine you have to create a ticket on support as indicated.

If this is for testing this is related to the image field of table installed_application wich is empty for depreciated CentOS applications instead of having "centos-base:6.9.10" ont the filed.

Regards,

Support Member

Hello Zoldax, Thank You for your reply, it is a test system, and unfortunately cant raise a regular support request, so any further guidance is very helpful,

Hello Support Member,

On production machine open a ticket, this is mandatory !

On a test machine only, first backup the table installed_application.

Then check the image field on the table installed_application table :

psql -Uqradar -c "select id, name, image_repo from installed_application"

For each id with an image empty image do :

psql -Uqradar -c "select id, image installed_application set image = 'centos-base:6.9.10' where id = IDOFIMAGE;"

Then clear browser cache and check the admin tab again

IBM recommend you upgrade these centos based apps where possible as they are out of support:

https://www.ibm.com/support/pages/qradar-applications-centos-6-and-python-2-end-support

Regards,

zoldax

Hello Support Member,

On production machine open a ticket, this is mandatory !

On a test machine only, first backup the table installed_application.

Then check the image field on the table installed_application table :

psql -Uqradar -c "select id, name, image from installed_application"

For each id with an image empty image do :

psql -Uqradar -c "select id, image installed_application set image = 'centos-base:6.9.10' where id = IDOFIMAGE;"

Then clear browser cache and check the admin tab again

IBM recommend you upgrade these centos based apps where possible as they are out of support:

https://www.ibm.com/support/pages/qradar-applications-centos-6-and-python-2-end-support

Regards,

zoldax