APAR status
Closed as program error.
Error description
Users who create or modify existing rules in Rule Wizard can experience an issue where they cannot transition beyond the Rule Response interface when they click 'Next'. This issue applies to rules that as a rule response attempt to update a reference table. Clicking next takes users back to the Rule Response page and users are unable to save the rule change. Users on QRadar 7.5.0 Update Package 4 and 7.5.0 Update Package 5 reported this user interface issue. No errors are displayed in the Rule Response screen, but a 'session must be in bounds' error is logged in qradar.error. [tomcat.tomcat] [[email protected] (1800) /console/do/rulewizard] com.q1labs.frameworks.session.SessionContext: [ERROR] [NOT:0000003000][-/- -] [-/- -]Session must be in the bounds of a transaction to access jpa/jdbc resources. Session Id: dc9846db-2739-401a-aaf8-7d56e00eacd3 [tomcat.tomcat] [[email protected] (1800) /console/do/rulewizard] java.lang.IllegalStateException [tomcat.tomcat] [[email protected] (1800) /console/do/rulewizard] at com.q1labs.frameworks.session.JPASessionDelegate.checkTX(JPA SessionDelegate.java:307)
Local fix
No workaround available. APARs identified as 'No workaround available' require a software delivery to resolve. Administrators can subscribe to the APAR to receive updates when software releases are published for this issue.
Problem summary
The user interface issue where the Next button did not behave as expected when adding a reference table update in a rule response is corrected in mutlipe releases. Adminsitrators can upgrade to either QRadar 7.5.0 Update Package 6 IF2 or QRadar 7.5.0 Update Package 7 where the issue is resolved.
Problem conclusion
This issue is resolved in the following releases: - QRadar 7.5.0 Update Package 7. - QRadar 7.5.0 Update Package 6 Interim Fix 2. To view all issues in this release, see the QRadar Software 101 page (https://www.ibm.com/community/qradar/home/software/).
Temporary fix
Comments
APAR Information
APAR number
IJ45829
Reported component name
QRADAR SOFTWARE
Reported component ID
5725QRDSW
Reported release
750
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2023-03-14
Closed date
2023-11-27
Last modified date
2023-11-27
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
QRADAR SOFTWARE
Fixed component ID
5725QRDSW
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"750","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
27 November 2023