IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  QRadar 7.5.0 update package 2 issue.

    Posted Tue September 05, 2023 12:50 PM

    I updated my QRadar from 7.4.3  version to 7.5.0 update package 2, now I have to update my QRadar to update package 5 and I have facing this issue:

    [ERROR] This patch was meant for a different product.

    So can anyone guide me how to resolve this issue.



    ------------------------------
    Abdul Rafey
    ------------------------------


  • 2.  RE: QRadar 7.5.0 update package 2 issue.

    Posted Tue September 05, 2023 05:33 PM
    Edited by Jonathan Pechta Tue September 05, 2023 05:35 PM

    Users who see the following message are hitting a known issue:

    [INFO] Preparing test only patch...
    Bareword found where operator expected at (eval 118) line 42, near "'This system doesn't"
            (Missing operator before t?)
    [ERROR] This patch was meant for a different product.

    This issue is caused by a problem in a secure boot test utility that is part of the pre-patch checking described in APAR IJ38842. The system tries to check the state to determine if secure boot is enabled. The patch tries to check post "This system doesn't...", which should finish as "This system doesn't support secure boot", but the myver tool tries to determine if efi is enabled and the single quote causes the error and forces the patch to display the, "This patch was meant for a different product" as part of the error message. 

    Support can help you resolve this issue by commenting out a line from the myver utility to remove an IF statement that checks the status of EFI. This is an issue that requires a support case as described in the APAR.

    Important: This issue was officially resolved in 7.5.0 Update Package 3 or later. Be aware, that if you decide to update to QRadar 7.5.0 Update Package 4 or later and have WinCollect 7 managed agents, you also will need to update your WinCollect version too. If you do not have cycles to update both the appliance giving you the patch error, plus your WinCollect agents, you might want to update to 7.5.0 Update Package 3 as if you go to UP5, you are looking at a larger scope to your update (appliances and WinCollect 7 managed agent installs). 

    Hope this helps...



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message


  • 3.  RE: QRadar 7.5.0 update package 2 issue.

    Posted Wed September 06, 2023 02:45 AM

    Hi Abdul Rafey,

    I am also planning to upgrade QRadar from 7.4.3 FP1 to N or N-1, depends on client approval. I need pre and post upgrade checklist. Can you provide or you conact details? Also are you using distributed deployment or AIO?



    ------------------------------
    Abdul Quadeer
    ------------------------------

    Original Message


  • 4.  RE: QRadar 7.5.0 update package 2 issue.

    Posted Wed September 06, 2023 10:31 AM

    There is a pre and post upgrade check list available here: https://ibm.biz/qradarchecklist. IBM.biz links are IBM's official URL shortener, but review this list and start a new thread if you have questions or concerns. 



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message


  • 5.  RE: QRadar 7.5.0 update package 2 issue.

    Posted Wed September 06, 2023 10:35 AM
    Edited by Wendy Batten Sun September 10, 2023 04:52 PM

    I recommend that you use update package 7.5.03 or later. Here, in the case of QRadar Update 7.5.0 Update Package 4, you also need to think about updating the existing version of WinCollect. In my case this helped to solve such a problem, maybe it will be the same for you. 



    ------------------------------
    Michael Dezert
    ------------------------------

    Original Message


  • 6.  RE: QRadar 7.5.0 update package 2 issue.

    Posted Thu September 07, 2023 01:42 AM
    Edited by Abdul Rafey Thu September 07, 2023 01:43 AM

    Hey Abdul Quadeer,

    I did my upgradation on AIO environment and yes you can contact me on my email abulrafey.zafar@systemsltd.com.



    ------------------------------
    Abdul Rafey
    ------------------------------

    Original Message


Related Content