IJ30161: A QRADAR "DEPLOY CHANGES" PERFORMED ON DECEMBER 31 2020 CAN CAUSE QRADAR FUNCTIONALITY ISSUES

APAR status

• Closed as program error.

Error description

• Performing a "Deploy Changes" function on December 31 2020 can
  cause a QRadar deployment to stop functioning as expected.
  This issue is related to the function that validates a license
  key.
  Messages similar to the following might be visible in
  var/log/qradar.log when this issue occurs:
  [ecs-ec-ingress.ecs-ec-ingress] [main] com.eventgnosis.ecs:
  [INFO] [NOT:6000][X.X.X.X/- -] [-/- -]Waiting for valid
  license...
  [ecs-ep.ecs-ep] [main] com.eventgnosis.ecs: [INFO]
  [NOT:6000][X.X.X.X/- -] [-/- -]Waiting for valid license...
  [ecs-ec.ecs-ec] [main] com.eventgnosis.ecs: [INFO]
  [NOT:6000][X.X.X.X/- -] [-/- -]Waiting for valid license..
  Note: This affects a manual "Deploy changes" function or any
  that are performed automatically (example: AutoUpdate)
  

Local fix

• For more detailed information, please see the following Flash
  Notification:
  https://ibm.biz/BdfDdV
  
  An issue report and FAQ is available for IJ30161 from QRadar
  Support. For more information, see:
  https://www.ibm.com/support/pages/node/6398674
  

Problem summary

• This issue was fixed in QRadar QRM QVM release of 7.3.3 FixPack
  7 and 7.4.2 FixPack 1.
  

Problem conclusion

• This issue was fixed in QRadar QRM QVM release of 7.3.3 FixPack
  7 and 7.4.2 FixPack 1.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  QRADAR SOFTWARE

• Fixed component ID

  5725QRDSW

Applicable component levels