IBM Cloud Pak for Security

Cloud Pak for Security

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Cloud Pak for Security 1.4: some ui elements are not responding

    Posted Fri December 04, 2020 09:00 AM
    Edited by Ali Okan Yuksel Fri December 04, 2020 09:08 AM
    Hello,

    I have installed CP4S 1.4 successfully. All pods look running.

    But when I tried to open some links (- Data Explorer, - Organization Profile, - TII), page looks empty.

    Screenshots attached.

    Logs:
    --
    [root@lbint ~]# oc get pod -lrole=client
    NAME READY STATUS RESTARTS AGE
    ibm-dba-ek-isc-cases-elastic-ibm-dba-ek-client-578d66d7dd-67hjf 1/1 Running 0 147m
    [root@lbint ~]# oc logs $(oc get pod -lname=isc-cases-postgres -o name) |tail
    2020-12-04 13:57:37,312 INFO: Lock owner: isc-cases-postgres-674fc47c56-hg9f6; I am isc-cases-postgres-674fc47c56-hg9f6
    2020-12-04 13:57:37,446 INFO: no action. i am the leader with the lock
    2020-12-04 13:57:47,312 INFO: Lock owner: isc-cases-postgres-674fc47c56-hg9f6; I am isc-cases-postgres-674fc47c56-hg9f6
    2020-12-04 13:57:47,364 INFO: no action. i am the leader with the lock
    2020-12-04 13:57:57,312 INFO: Lock owner: isc-cases-postgres-674fc47c56-hg9f6; I am isc-cases-postgres-674fc47c56-hg9f6
    2020-12-04 13:57:57,365 INFO: no action. i am the leader with the lock
    2020-12-04 13:58:03,259 INFO: Lock owner: isc-cases-postgres-674fc47c56-hg9f6; I am isc-cases-postgres-674fc47c56-hg9f6
    2020-12-04 13:58:03,322 INFO: no action. i am the leader with the lock
    2020-12-04 13:58:13,261 INFO: Lock owner: isc-cases-postgres-674fc47c56-hg9f6; I am isc-cases-postgres-674fc47c56-hg9f6
    2020-12-04 13:58:13,317 INFO: no action. i am the leader with the lock

    [root@lbint ~]# oc logs -lname=isc-cases-application -c cases-application-client-log-tailer | tail
    {"level":"info","thread":"co3-startStop-1","logger":"com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory","message":"Binding com.co3.web.rest.TimerFieldREST to GuiceManagedComponentProvider with the scope \"PerRequest\"","context":"default","ibm_datetime":"2020-12-04T13:35:59.153Z"}
    {"level":"info","thread":"co3-startStop-1","logger":"com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory","message":"Binding com.co3.web.rest.TypeREST to GuiceManagedComponentProvider with the scope \"PerRequest\"","context":"default","ibm_datetime":"2020-12-04T13:35:59.159Z"}
    {"level":"info","thread":"co3-startStop-1","logger":"com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory","message":"Binding com.co3.web.rest.WikiREST to GuiceManagedComponentProvider with the scope \"PerRequest\"","context":"default","ibm_datetime":"2020-12-04T13:35:59.162Z"}
    {"level":"info","thread":"co3-startStop-1","logger":"com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory","message":"Binding com.co3.web.rest.WorkflowInstanceREST to GuiceManagedComponentProvider with the scope \"PerRequest\"","context":"default","ibm_datetime":"2020-12-04T13:35:59.165Z"}
    {"level":"info","thread":"co3-startStop-1","logger":"com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory","message":"Binding com.co3.web.rest.WorkflowREST to GuiceManagedComponentProvider with the scope \"PerRequest\"","context":"default","ibm_datetime":"2020-12-04T13:35:59.170Z"}
    {"level":"info","thread":"co3-startStop-1","logger":"com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory","message":"Binding com.co3.web.rest.WorkspaceREST to GuiceManagedComponentProvider with the scope \"PerRequest\"","context":"default","ibm_datetime":"2020-12-04T13:35:59.172Z"}
    {"level":"info","thread":"main","logger":"org.apache.coyote.http11.Http11NioProtocol","message":"Starting ProtocolHandler [\"http-nio-9443\"]","context":"default","ibm_datetime":"2020-12-04T13:35:59.949Z"}
    {"level":"info","thread":"main","logger":"org.apache.catalina.startup.Catalina","message":"Server startup in 54786 ms","context":"default","ibm_datetime":"2020-12-04T13:35:59.964Z"}
    {"level":"info","thread":"http-nio-9443-exec-1","mdc":{"ipAddress":"10.131.0.1","userAgent":"kube-probe/1.18+","userEmail":"No Context"},"logger":"org.apache.jasper.compiler.TldLocationsCache","message":"At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.","context":"default","ibm_datetime":"2020-12-04T13:36:05.565Z"}
    {"level":"info","thread":"pool-3-thread-1","logger":"com.co3.threat.ThreatFeedManager","message":"Rescanning for incident artifact hits","context":"default","ibm_datetime":"2020-12-04T13:55:51.932Z"}

    [root@lbint ~]# oc logs -lname=pulsedashboard |tail
    [HPM] Error occurred while trying to proxy request /api/items from cp4s.security.tr.ibm.com to http://localhost:5001 (ECONNREFUSED) (https://nodejs.org/api/errors.html#errors_common_system_errors)
    [HPM] Rewriting path from "/pulse/api/config" to "/api/config"
    [HPM] GET /pulse/api/config ~> http://localhost:5001
    [HPM] Rewriting path from "/pulse/api/parameters" to "/api/parameters"
    [HPM] GET /pulse/api/parameters ~> http://localhost:5001
    [HPM] Error occurred while trying to proxy request /api/config from cp4s.security.tr.ibm.com to http://localhost:5001 (ECONNREFUSED) (https://nodejs.org/api/errors.html#errors_common_system_errors)
    [HPM] Rewriting path from "/pulse/api/pinned_windows" to "/api/pinned_windows"
    [HPM] GET /pulse/api/pinned_windows ~> http://localhost:5001
    [HPM] Error occurred while trying to proxy request /api/parameters from cp4s.security.tr.ibm.com to http://localhost:5001 (ECONNREFUSED) (https://nodejs.org/api/errors.html#errors_common_system_errors)
    [HPM] Error occurred while trying to proxy request /api/pinned_windows from cp4s.security.tr.ibm.com to http://localhost:5001 (ECONNREFUSED) (https://nodejs.org/api/errors.html#errors_common_system_errors)

    ------------------------------
    Ali Okan Yuksel
    ------------------------------


  • 2.  RE: Cloud Pak for Security 1.4: some ui elements are not responding

    Posted Fri December 04, 2020 09:17 AM
    how can we fix this issue?

    FetchError: request to https://cp4s.security.tr.ibm.com/api/entitlements/v1.0/entitlements failed, reason: Hostname/IP does not match certificate's altnames: Host: cp4s.security.tr.ibm.com. is not in the cert's altnames: DNS:cp4s.tr.security.ibm.com
    at TLSSocket.socketErrorListener (_http_client.js:426:9)
    at emitErrorNT (internal/streams/destroy.js:92:8)
    at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
    FetchError: request to https://cp4s.security.tr.ibm.com/api/entitlements/v1.0/entitlements failed, reason: Hostname/IP does not match certificate's altnames: Host: cp4s.security.tr.ibm.com. is not in the cert's altnames: DNS:cp4s.tr.security.ibm.com
    at TLSSocket.socketErrorListener (_http_client.js:426:9)
    at emitErrorNT (internal/streams/destroy.js:92:8)
    at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
    [root@lbint charts]#

    ------------------------------
    Ali Okan Yuksel
    ------------------------------



  • 3.  RE: Cloud Pak for Security 1.4: some ui elements are not responding

    Posted Sun December 06, 2020 10:28 AM
    I solved this issue by  re-creating certificates and re-installing.

    ------------------------------
    Ali Okan Yuksel
    ------------------------------