IBM Support

IJ20450: LOG SOURCE MANAGEMENT APP IS NOT ABLE TO CREATE JDBC LOG SOURCE WHEN 'NONE' IS CHOSEN FROM THE 'QUERYLIST'

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • It has been identified that creating a JDBC Log Source using
    the Log Source Management app fails when 'none' is chosen from
    the 'querylist'.
    Using the legacy Log Source management User Interface (UI) to
    create the same Log Source works as expected.
    

Local fix

  • Use the legacy Log Source management UI to create these JDBC
    Log Sources.
    

Problem summary

  • It has been identified that the old UI puts in a value of blank
    string ( '' ) when 'none' is chosen from the queryList, but the
    LSM app SQL has it as 'none'.
    This creates an issue at code run time as it's looking for blank
    string to know whether to run a pre-formatted query or not, so
    it's trying to run a query of 'none' which is invalid.
    There's also some issue around enabling / disabling working log
    sources through the LSM app because the enum values don't match
    up.
    

Problem conclusion

  • The fix has been provided in the following release of JDBC
    Scanners:
    PROTOCOL-JDBC-7.3-20200110201324.noarch.rpm
    PROTOCOL-JDBC-7.4-20200110201319.noarch.rpm
    

Temporary fix

Comments

APAR Information

  • APAR number

    IJ20450

  • Reported component name

    QRADAR SOFTWARE

  • Reported component ID

    5725QRDSW

  • Reported release

    731

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-10-23

  • Closed date

    2020-06-22

  • Last modified date

    2020-06-22

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    QRADAR SOFTWARE

  • Fixed component ID

    5725QRDSW

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"731","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
23 June 2020