APAR status
Closed as program error.
Error description
In QRadar 7.5.0 Update Package 2, When the timezone is changed in the System Time Settings tab from the System and License Management window in the UI, the change is not saved. After the attempted change, the timezone_id becomes invalid and as a result, the System Time Setting tab fails to load. Errors similar to the following appear in /var/log/qradar.log: [Python tool]: [INFO] 'Setting the system time and timezone configuration. ' [Python tool]: [INFO] 'Setting the time zone America/Halifax in /etc/localtime' [Python tool]: [INFO] Failed to perform the task. [Python tool]: [INFO] <class 'UnicodeDecodeError'> [Python tool]: [INFO] Traceback (most recent call last): [Python tool]: File "/opt/qradar/conf/../lib/python/qradar/systemTimeSetup.py", line 458, in main [Python tool]: manager.set(args) [Python tool]: File "/opt/qradar/conf/../lib/python/qradar/systemTimeSetup.py", line 183, in set [Python tool]: self._setTZ(args.timezone) [Python tool]: File "/opt/qradar/conf/../lib/python/qradar/systemTimeSetup.py", line 238, in _setTZ [Python tool]: for line in fileinput.input(TZ_CONF_PATH, inplace=True): [Python tool]: File "/usr/lib64/python3.6/fileinput.py", line 250, in _next_ [Python tool]: line = self._readline() [Python tool]: File "/usr/lib64/python3.6/fileinput.py", line 364, in _readline [Python tool]: return self._readline() [Python tool]: File "/usr/lib64/python3.6/codecs.py", line 321, in decode [Python tool]: (result, consumed) = self._buffer_decode(data, self.errors, final) [Python tool]: UnicodeDecodeError: 'utf-8' codec can't decode byte 0xa2 in position 44: invalid start byte [Python tool]: [INFO] 'Getting the system time and timezone settings. ' [Python tool]: [INFO] { [Python tool]: "timezone_id": "../../../etc/localtime", [Python tool]: "is_sync_with_ntp_server": false, [Python tool]: "ntp_server_addresses": null, [Python tool]: "current_date": "2022-08-02 10:50:53" [Python tool]: } [Python tool]: [INFO] 'Getting the system time and timezone settings. ' [Python tool]: [INFO] { [Python tool]: "timezone_id": "../../../etc/localtime", [Python tool]: "is_sync_with_ntp_server": false, [Python tool]: "ntp_server_addresses": null, [Python tool]: "current_date": "2022-08-02 10:51:29"
Local fix
Users can change the time zone using the CLI: https://www.ibm.com/support/pages/node/549259 If the workaround does not solve the issue, contact support.
Problem summary
This issue has been resolved in QRadar 7.5.0 Update Package 4.
Problem conclusion
This issue has been resolved in QRadar 7.5.0 Update Package 4.
Temporary fix
Comments
APAR Information
APAR number
IJ41613
Reported component name
QRADAR SOFTWARE
Reported component ID
5725QRDSW
Reported release
750
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2022-08-05
Closed date
2022-12-13
Last modified date
2022-12-13
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
QRADAR SOFTWARE
Fixed component ID
5725QRDSW
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"750","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
13 December 2022