IBM Support

QRadar: Detached App Host upgrade can hang on 'Applying presql script' as described in APAR IJ31253

Troubleshooting


Problem

When patching a App Host that has been detached from the deployment, the installer can hang when 'Applying presql script' in the QRadar command line interface. Administrators who experience this issue can confirm the process ID for the IMQ service and apply the described workaround to continue the upgrade. It is critical that administrators do NOT attempt to reboot or force the installer to quit, but use the IMQ service instructions provided in this technical note to allow the App Host upgrade to continue.

Symptom

If the detached QRadar App Host appliance appears to be stuck on 'Applying presql script' and does not transition to the next step in the patch process after 10 minutes or more, administrators might need to apply the workaround in this technical note.

Resolving The Problem

  1. Use SSH to log in to the QRadar Console command line as the root user.
  2. Open a second SSH session to the App Host appliance.
  3. To get the process ID (PID) for the IMQ service, type:
    systemctl status imq | grep -i PID
  4. To stop IMQ using the following command, type:
    gdb --batch --eval-command 'call exit(0)' --pid <IMQPID>

    Results
    After the command is run, the upgrade can continue as normal. If your App Host upgrade appears to still be stuck on 'Applying presql script', contact QRadar Support for assistance. It is critical for administrators to never exit an upgrade in process, attempt to reboot an appliance mid-upgrade, or force close the installer during a software upgrade. Ensure that your case description summarizes the issue, any steps you completed, and include a reference to APAR IJ31253 in your case summary. 

Document Location

Worldwide

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU008","label":"Security"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtdAAA","label":"Upgrade"}],"ARM Case Number":"TS005179307","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.3.3;7.4.0;7.4.1;7.4.2"}]

Document Information

Modified date:
24 March 2021

UID

ibm16428037