Troubleshooting
Problem
Users might find their XGS appliance web interface is inaccessible. They might also see a health warning regarding "SiteProtector policy configuration" in the Health Summary of the appliance in the SiteProtector Console.
Symptom
- Unable to apply policy changes via SiteProtector or the LMI
- LMI might eventually stop working
- Unable to properly restart services via the CLI
- Status in SiteProtector might change to OFFLINE
Diagnosing The Problem
If you log in via the CLI and use the grep function in 'logs', you are able to see these messages in the system logs:
Error: unable to grab lock after 600 seconds. Another instance is running.
Failed to acquire lock /var/run/mesa_config.commit.lock
The issue is caused by a lock file that gets left behind during the renewal of the built-in self-signed LMI certificate. This issue was fixed in firmware 5.4.0.7 and 5.5.0.2.
Resolving The Problem
To resolve the issue, either restart the appliance or contact IBM Support for a fixpack to clear the lock file.
NOTE: You can normally install the fixpack via the LMI if it has not yet failed. If the LMI is no longer accessible, the fixpack can be installed via the CLI. That would require copying the fixpack file to a USB 2.0 thumb drive inserted into the XGS appliance.
Document Location
Worldwide
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
06 November 2019
UID
ibm11102851