Troubleshooting
Problem
Administrators sometimes see situations where an auto update does not download and install a daily auto update bundle. Under these issues, autoupdates might need to be reset.
Symptom
- Log in to the QRadar UI as an admin user.
- Click the Admin tab.
- Click Auto Update > Get New Updates.
Results
The UI appears as if it is downloading an update, but nothing happens. No entries are generated in /var/log/autoupdates for that date and time.
Resolving The Problem
To repair autoupdates, administrators might need to reset it manually.
Before you begin:
Resetting autoupdates results in the full 5 gigabytes autoupdates bundle being downloaded. The result is that the download can take a while to complete and begin the update.
Resetting autoupdates results in the full 5 gigabytes autoupdates bundle being downloaded. The result is that the download can take a while to complete and begin the update.
- Use SSH to log in to the Console as the root user.
- Run this command at the prompt.
/opt/qradar/bin/UpdateConfs.pl -runallThe output displaysSetting lastdau to 0 Setting lastpatch to 0 Setting lastau to 0 Setting runnow to 1 Autoupdate will start at the starting of the next minute - Log in to the QRadar UI as an admin user.
- Click the Admin tab.
- Click Auto Update > Get New Updates.
Results
Look within /var/log/autoupdates/ for new folders that correspond to when Get New Updates was run.
Look within /var/log/autoupdates/ for new folders that correspond to when Get New Updates was run.
Document Location
Worldwide
[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]
Was this topic helpful?
Document Information
Modified date:
04 June 2021
UID
ibm16408182