IBM Support

QRadar: Auto update displays a benign error: 'System cannot connect to the specified web server address, directory' (APAR IJ29298)

Troubleshooting


Problem

Administrators who use the new IBM Cloud auto update server might experience an incorrect error notification that the auto update did not complete after they configure the web server to use https://auto-update.qradar.ibmcloud.com/. The error 'System cannot connect to the specified web server address, directory' can display to administrators when the auto update completes successfully.

Symptom

The following error message is displayed, but the QRadar auto update completes successfully. The cause of this error message is considered benign and the issue is under review as APAR IJ29298.
image 6422
Figure 1: The cause of 'System cannot connect to the specified web server address, directory' is under review.

Resolving The Problem

Administrators can verify that auto updates completes successfully by validating the log messages in the user interface or from the command line.

Procedure
  1. Log in to the QRadar Console as an administrator.
  2. Click the Admin tab.
  3. Click Auto Update icon.
  4. Click Get New Updates button.
  5. Wait for the auto update to attempt the connection.
  6. Click View Log to verify the Last Update Status.
    image 6434
    Figure 2: The last status from the logs displays the 'All updates completed successfully' message.
Results
The log can be used to validate if the update was successful. If the log reports 'All updates completed successfully', administrators can ignore the error message displayed in the user interface. If you continue to receive 500 cannot connect error messages, confirm your proxy configuration or contact QRadar Support.

 

Troubleshooting: How to validate auto update settings from the command line

Administrators who prefer the command line can SSH to the QRadar Console as the root user to verify the connection to the new auto update server. You must have root access to the QRadar Console to complete this procedure.

Procedure

  1. Use SSH to log in to your QRadar Console as the root user.
  2. Type the following command to verify the connection: /opt/qradar/bin/UpdateConfs.pl -testConnect 1 0
    - If successful, the following message is displayed:[AUTOUPDATE] [TESTCONNECT] Test downloaded successfully! 
    image 5145
    Figure 3: A successful auto update message is displayed.

    - If unsuccessful, the following message is displayed and the administrator should verify their proxy configuration:[AUTOUPDATE] [TESTCONNECT] Could not download manifest list.
    image 5149
    Figure 4: If you continue to receive 500 cannot connect error messages, confirm your proxy configuration or contact QRadar Support.

Document Location

Worldwide

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtDAAQ","label":"Auto Update"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]

Document Information

Modified date:
24 November 2020

UID

ibm16339743

Page Feedback