IBM Support

IJ07254: BUILD OR REBUILD OF A DISCONNECTED HIGH AVAILABILITY (HA) SECONDARY APPLIANCE (500) FROM QRADAR 7.2.8P1 TO 7.3.1 CAN FAIL

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • It has been identified that a database sanity check failure can
    occur during the build/rebuild of a disconnected High
    Availability (HA) Secondary appliance (500).  The database
    sanity check failure can occur during the upgrade steps from
    QRadar version 7.2.8 patch1 to 7.3.1.
    Messages similar to the following might be displayed during the
    
    appliance upgrade from QRadar version 7.2.8 patch1 to 7.3.1 when
    this issue is occurring:
    Starting postgresql-qf service: [  OK  ]
    OK: Successfully processed post-upgrade SQL for
    postgresql-qf-forensics database.
    Mon Jun 18 15:55:08 EST 2018OK: Successfully processed
    post-upgrade SQL for postgresql-qf-forensics database.
    Starting postgresql service: ^MESC[0KStarting postgresql
    service: DB took 0 secondsESC[60G[ESC[0;32m  OK  ESC[0;39m]
    Running database sanity checks:  FAILED
    Re-installing postgresql RPMs:  OK
    Initializing postgresql:  OK
    Preparing the database:  FAILED
    Could not prepare postgresql.
    Restoring PG service postgresql to its original state...
    Mon Jun 18 16:11:08 EST 2018Restoring PG service postgresql to
    its original state...
    Mon Jun 18 16:11:08 EST 2018mkdir -p
    /tmp/postgres_92_to_96_upgrade/postgresql
    OK: PG service postgresql is not currently running but was
    running previously. Starting.
    Mon Jun 18 16:11:08 EST 2018OK: PG service postgresql is not
    currently running but was running previously. Starting.
    Starting postgresql service
    Mon Jun 18 16:11:08 EST 2018Starting postgresql service
    Mon Jun 18 16:11:08 EST 2018service postgresql start
    An old version of the database format was found.
    You need to upgrade the data format before using PostgreSQL.
    See (Your System's documentation
    directory)/postgresql-9.6.4.8/README.rpm-dist for more
    information.
    ERROR: Failed to start postgresql service (1)
    Error executing 34-postgresql-upgrade.sh.  See
    /var/log/setup-7.3.1.20180119194650/qradar_setup.log for more
    details.
    

Local fix

  • When building/rebuilding a disconnected High Availability (HA)
    Secondary appliance (500), use the following patch and upgrade
    path if matching partitions to the Primary appliance from 7.2.8
    is needed:
    1) Install 728 GA (ISO)
    2) Patch to 728 patch 1 (sfs)
    3) Patch to 728 patch 11 (sfs)
    4) Upgrade to 731 patch X (ISO)
    

Problem summary

  • This issue was fixed in QRadar QRM QVM release of 731 patch 6.
    

Problem conclusion

  • This issue was fixed in QRadar QRM QVM release of 731 patch 6.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IJ07254

  • Reported component name

    QRADAR SOFTWARE

  • Reported component ID

    5725QRDSW

  • Reported release

    731

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-06-21

  • Closed date

    2018-09-18

  • Last modified date

    2018-09-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    QRADAR SOFTWARE

  • Fixed component ID

    5725QRDSW

Applicable component levels

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"731","Edition":""}]

Document Information

Modified date:
18 September 2018