IBM Support

QRadar: Recon script returns error 'endpoint not specified'

Troubleshooting


Problem

After you run the command /opt/qradar/support/recon ps to check the status of the apps, it returns error "endpoint not specified".

Symptom

/opt/qradar/support/recon ps
&ps.StatusResult{Check:(*ps.StatusCheck)(nil), Message:"endpoint not specified", Remediation:"", Value:1}

Cause

The hostname parameter is missing in the file /etc/sysconfig/network.

Diagnosing The Problem

  1. Run the recon script.
    /opt/qradar/support/recon ps
  2. Verify the output says "endpoint not specified".
  3. Verify the hostname FQDN parameter is not in network file.
    cat /etc/sysconfig/network

Resolving The Problem

  1. Run this command to add the hostname parameter to the network file.
    echo "HOSTNAME=`hostname -f`" >> /etc/sysconfig/network
  2. Confirm the hostname FQDN was added correctly to the network file.
    cat /etc/sysconfig/network
Result.
Recon script runs without reporting the error.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.4.1;7.4.2;7.4.3"}]

Document Information

Modified date:
20 September 2021

UID

ibm16489911