IBM Support

QRadar: Scheduled backups are timing out and fail to complete

Troubleshooting


Problem

Scheduled backups are running for a long time and fail to complete successfully. A system notification is generated when a backup fails to complete for "Backup: The last scheduled backup exceeded execution threshold.".

Symptom

A system notification is generated when a backup fails to complete for "Backup: The last scheduled backup exceeded execution threshold.".
The following messages are also displayed in the /var/log/qradar.log file:
[Scheduled Backup]com.q1labs.hostcontext.backup.BackupRecoveryEngine: [WARN] [NOT:0150024101][<Console IP>/- -] [-/- -]Backup has exceeded its time limit of 10800s, canceling...

[Scheduled Backup]com.q1labs.hostcontext.backup.BackupRecoveryEngine: [ERROR] [NOT:0150023105][<Console IP>/- -] [-/- -]Backup Failed: TIMED_OUT

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtNAAQ","label":"Deployment"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
31 March 2022

UID

swg21694955