IBM Support

IJ26074: AUTOMATED RISK MANAGER QUERY CAN RUN LONGER THAN EXPECTED CAUSING AN APPLICATION ERROR ON THE RISKS TAB

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • A query which runs periodically on the Risk Manager server to
    gather vulnerability statistics for the subnets on the Topology
    screen can sometimes take longer than ten minutes to complete.
    When this situation occurs, the tomcat-rm service is
    automatically restarted and an Application Error is generated
    on the Risks tab during the restart of the tomcat-rm service.
    Messages similar to the following might be visible in
    /var/log/qradar.log when this issue is occurring:
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]
    org.apache.openjpa.lib.jdbc.ReportingSQLException: ERROR:
    canceling statement due to user request {prepstmnt 1607360343
    SELECT c.longname AS impact FROM qrm_asset qa INNER JOIN
    classificationitem ci ON qa.vulnid = ci.vulnid INNER JOIN
    classification c ON ci.classificationid=c.classificationid
    WHERE qa.vulnid IS NOT NULL AND (qa.domainid IN (0)) AND (
    (qa.ipaddress << 'x.x.x./x') )} [code=0, state=57014]
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.lib.jdbc.LoggingConnectionDecorator.wrap(Logg
    ingConnectionDecorator.java:218)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.lib.jdbc.LoggingConnectionDecorator.wrap(Logg
    ingConnectionDecorator.java:202)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.lib.jdbc.LoggingConnectionDecorator.access$70
    0(LoggingConnectionDecorator.java:58)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.lib.jdbc.LoggingConnectionDecorator$LoggingCo
    nnection$LoggingPreparedStatement.executeQuery(LoggingConnection
    Decorator.java:1117)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.lib.jdbc.DelegatingPreparedStatement.executeQ
    uery(DelegatingPreparedStatement.java:268)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.jdbc.sql.PostgresDictionary$PostgresPreparedS
    tatement.executeQuery(PostgresDictionary.java:1011)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.lib.jdbc.DelegatingPreparedStatement.executeQ
    uery(DelegatingPreparedStatement.java:268)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.jdbc.kernel.JDBCStoreManager$CancelPreparedSt
    atement.executeQuery(JDBCStoreManager.java:1800)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.lib.jdbc.DelegatingPreparedStatement.executeQ
    uery(DelegatingPreparedStatement.java:268)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    org.apache.openjpa.lib.jdbc.DelegatingPreparedStatement.executeQ
    uery(DelegatingPreparedStatement.java:258)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    com.q1labs.simulator.util.LocalQRadarAPI.collectFromResult(Local
    QRadarAPI.java:3256)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    com.q1labs.simulator.util.LocalQRadarAPI.getImpactsinSubnet(Loca
    lQRadarAPI.java:4987)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    com.q1labs.simulator.ask.APIQRadarInterface.getImpactsinSubnet(A
    PIQRadarInterface.java:113)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    com.q1labs.simulator.util.subnetcolor.StatisticsCollectorTask.co
    llectStatisticsForSubnet(StatisticsCollectorTask.java:166)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    com.q1labs.simulator.util.subnetcolor.StatisticsCollectorTask.co
    llectStatisticsForAll(StatisticsCollectorTask.java:148)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    com.q1labs.simulator.util.subnetcolor.StatisticsCollectorTask.co
    llectStatistics(StatisticsCollectorTask.java:58)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    com.q1labs.simulator.jobs.StatisticsCollectorJob.process(Statist
    icsCollectorJob.java:42)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    com.q1labs.simulator.jobframework.jobexecutioncontroller.schedul
    er.PeriodicJobScheduler$1.run(PeriodicJobScheduler.java:122)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    java.util.concurrent.Executors$RunnableAdapter.call(Executors.ja
    va:522)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    java.util.concurrent.FutureTask.runAndReset(FutureTask.java:319)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFuture
    Task.access$301(ScheduledThreadPoolExecutor.java:191)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFuture
    Task.run(ScheduledThreadPoolExecutor.java:305)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExec
    utor.java:1160)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExe
    cutor.java:635)
    [tomcat-rm.tomcat-rm] [Statistics Collector Job]    at
    java.lang.Thread.run(Thread.java:818)
    

Local fix

  • Contact Support for a possible workaround that might address
    this issue in some instances.
    

Problem summary

  • This issue was fixed in QRadar QRM QVM release of 7.4.3.
    

Problem conclusion

  • This issue was fixed in QRadar QRM QVM release of 7.4.3.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IJ26074

  • Reported component name

    QR RISK MANAGER

  • Reported component ID

    5725QRMSW

  • Reported release

    733

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-07-06

  • Closed date

    2021-05-25

  • Last modified date

    2021-05-25

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    QR RISK MANAGER

  • Fixed component ID

    5725QRMSW

Applicable component levels

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQQU","label":"IBM Security QRadar Risk Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"733"}]

Document Information

Modified date:
26 May 2021