IBM Support

IJ07123: INCONSISTENT RESULTS FOR ASSET SEARCHES 'ASSETS WITH OPEN SERVICE = DNS' VS 'ASSETS WITH OPEN SERVICE = DOMAIN'

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as suggestion for future release.

Error description

  • It has been identified that there are inconsistent results when
    performing some Asset searches surrounding flagged QRadar
    Vulnerability Manager open 'dns' services.
    
    Examples of asset searches and their results:
    Asset With Open Service dns: no results
    Asset With Open Services domain: correct result
    Vulnerability on Open Service equals dns: no results
    Vulnerability on Open Service equals domain: correct result
    Assets With Open Port Equals 53: correct result
    Vulnerabilities On Open Port Equals 53: correct result
    

Local fix

  • No workaround available.
    

Problem summary

Problem conclusion

Temporary fix

Comments

  • Asset searching works the way it was designed. We have verified
    that using asset with Open service equals any of domain or DNS
    will fix this issue for customers. Closing as works as designed.
    

APAR Information

  • APAR number

    IJ07123

  • Reported component name

    QRADAR SOFTWARE

  • Reported component ID

    5725QRDSW

  • Reported release

    731

  • Status

    CLOSED SUG

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-06-14

  • Closed date

    2018-09-18

  • Last modified date

    2018-09-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"731","Edition":""}]

Document Information

Modified date:
18 September 2018