IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Qradar HA VIP Interface Is Down

    Posted Mon December 28, 2020 09:52 AM
    Hello Experts
     
    I've completed a qradar upgrade from version 7.4.0 FP 4 to 7.4.1 FP 2.
    After finishing the upgrade I am unable to access the web UI using the VIP, any suggestions for the root cause of this issue
     
    Thanks.
     
    Regards,
    Ahmed Elsayed
    SIOC Analyst MEA
    IBM Egypt
     



  • 2.  RE: Qradar HA VIP Interface Is Down

    Posted Mon December 28, 2020 10:52 AM

    Hello Ahmed,

    your subject and description is a little bit short-handed. But, i assume, that tomcat is up and running? What about the status of HA active/standby/unknown? Did you see specific errors regarding to tomcat, hostcontext, etc. in the qradar/update.log? What about primary and secondary host? Are both hosts up and running? Are you able to connect both hosts via ssh?

    Hope this first suggestions will help..

    Regards,

    Ralph



    ------------------------------
    Ralph Belfiore
    IT Security Senior Consulting
    pro4bizz GmbH
    Karlsruhe
    +49 721 90981720
    ------------------------------



  • 3.  RE: Qradar HA VIP Interface Is Down

    Posted Fri January 08, 2021 01:39 AM
    Hi Ralph,

    I had a call with the support and they indicated that there was a problem with the mounted points which caused problems with the kernel installation of the primary appliance.
    during the call they reinstalled the kernel for the primary appliance and problem solved.

    Thanks.

    ------------------------------
    Ahmed Elsayed
    ------------------------------