IBM Support

QRadar: Adding managed host fails with an error "Failed to add host. Add host timed out" due to low bandwidth

Troubleshooting


Problem

The procedure of adding a managed host in QRadar® has a timeout threshold. When a managed host addition process takes longer than this threshold, the process is interrupt, and the managed host is not added to the deployment. One of the most common reasons for the addition process to take longer is low bandwidth between the console and the managed host.

Symptom

When adding a managed host, the user-interface never passes the step 10 of the addition process.
Figure01
In /var/log/qradar.log, the following error is shown:
[tomcat.tomcat] [Thread-303] com.ibm.si.configservices.api.v3_0.deployment.DeploymentAPI:[ERROR]
 unable to add managed host: Failed to add host. Add host timed out.
[tomcat.tomcat] [Thread-303] com.q1labs.restapi_annotations.content.exceptions.endpointExceptions.ServerProcessingException:
 Failed to add host. Add host timed out.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtNAAQ","label":"Deployment"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
15 December 2022

UID

ibm16847647