Troubleshooting
Problem
After you run the command /opt/qradar/support/recon ps to check the status of the apps, it returns error "endpoint not specified".
NOTE: This utility should only be run from where the apps are running (Console or AppHost if it exists)
Symptom
/opt/qradar/support/recon ps
&ps.StatusResult{Check:(*ps.StatusCheck)(nil), Message:"endpoint not specified", Remediation:"", Value:1}
Cause
The hostname parameter is missing in the file /etc/sysconfig/network from where the apps are running. (Console or AppHost if it exists)
Diagnosing The Problem
- Run the recon script.
/opt/qradar/support/recon ps - Verify the output says "endpoint not specified".
- Verify the hostname FQDN parameter is not in network file.
cat /etc/sysconfig/network
Resolving The Problem
- Run this command to add the hostname parameter to the network file. (Console or AppHost)
echo "HOSTNAME=`hostname -f`" >> /etc/sysconfig/network - Confirm the hostname FQDN was added correctly to the network file.
cat /etc/sysconfig/network
Result.
Recon script runs without reporting the error.
Related Information
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.4.1;7.4.2;7.4.3"}]
Was this topic helpful?
Document Information
Modified date:
24 February 2023
UID
ibm16489911