IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Rule wizard doesn't work expectedly

    Posted Mon May 22, 2023 02:20 AM
    Edited by İsmail Kaya Mon May 22, 2023 02:20 AM

    Hi,

    When I am trying to create or edit a rule (from Offenses--> Rules or Use Case Manager it doesn't matter), rule response and Enable parts of second page of rule wizard doesn't be seen. I upgraded Qradar from 7.5.0 UP4 to UP5 it didn't change. I tried firefox, safari or other browsers. When I looked at qradar.error and qradar.log files I saw these error logs:

    [tomcat.tomcat]    [admin@10.x.x.x    -6370    /console/do/rulewizard]    com.q    1labs.frameworks.session.SessionContext: [ERROR] [NOT:0000003000][10.x.x.x/- -] [-/- -]Session must be in the bounds of a transaction to access jpa/jdbc resources. Session Id: 2eb9d0c7-4fd4-4508-a499-8021b1d3b70a
    [tomcat.tomcat]    [admin@10.x.x.x    -6370    /console/do/rulewizard]    at    com.opensymphony.xwork2.interceptor.ConversionErrorInterceptor.doIntercept(ConversionErrorInterceptor.java:142)
    [tomcat.tomcat]    [admin@10.x.x.x    -6370    /console/do/rulewizard]    at    com.q1labs.uiframeworks.valve.ErrorReportValve.invoke(ErrorReportValve.java:47)
    [tomcat.tomcat]    [admin@10.x.x.x    -6960    /console/do/rulewizard]    at    org.apache.struts2.components.Component.fieldError(Component.java:266)
    [tomcat.tomcat]    [admin@10.x.x.x    -6960    /console/do/rulewizard]    org.a    pache.jsp.sem.jsp.ruleWizard.RuleWizard_002daction_jsp: [ERROR] [NOT:0000003000][10.x.x.x/- -] [-/- -]Could not forward to exception page, possibly an included JSP?

    [tomcat.tomcat]    [admin@10.x.x.x    -7561    /console/do/rulewizard]    at    com.opensymphony.xwork2.interceptor.ConversionErrorInterceptor.doIntercept(ConversionErrorInterceptor.java:142)
    [tomcat.tomcat]    [admin@10.x.x.x    -7561    /console/do/rulewizard]    at    com.q1labs.uiframeworks.valve.ErrorReportValve.invoke(ErrorReportValve.java:47)

    How can I solve these errors and issue, thanks for your helps.



    ------------------------------
    İsmail Kaya
    ------------------------------



  • 2.  RE: Rule wizard doesn't work expectedly

    Posted Tue May 23, 2023 02:03 AM
    I had a similar issue, I had opened a case, there was an issue in the QVM license.

    It was resolved by removing the QVM license.

    Regards,

    Maqsood Raza 

    ):+971-569061219




    Original Message


  • 3.  RE: Rule wizard doesn't work expectedly

    Posted Wed May 24, 2023 02:38 AM

    Thank you Maqsood but it doesn't work :(

    Any other suggestion please, thanx all.



    ------------------------------
    İsmail Kaya
    ------------------------------

    Original Message


Related Content