Resolving log source error after WinCollect update

An error message might appear when you attempt to edit a log source after you upgrade WinCollect, IBM® QRadar®, a Device Support Module (DSM), a protocol, or any Vulnerability Information Services (VIS) components. To remove cached files, restart the QRadar web service and clear the QRadar files from your browser cache.

Before you begin

You must have SSH access and root account credentials.

About this task

The following message indicates that the web server didn't restart after QRadar was updated:

An error has occurred. Refresh your browser (press F5) and attempt the action again. 
If the problem persists, please contact customer support for assistance.

A file might be cached by QRadar web service or your desktop browser. You must restart QRadar web service and remove the cached files on your desktop.

Procedure

  1. Use SSH to log in QRadar.
  2. Stop the QRadar web service by typing the following command:

    service tomcat stop

  3. Keep one web browser window open.
  4. To clear your browser cache, go to your web browser's preference settings.
  5. Restart the browser.
  6. Restart the QRadar web service by typing the following command:

    service tomcat start