Question & Answer
Question
How are Qradar applications affected by the restart of app framework services?
App framework services: Docker, Conman, Traefik, Docker-distribution, Qradarca-monitor
Answer
Important: Restarting any Qradar service without proper investigation can lead to more unexpected issues. Check the App troubleshooting before opening a support case page or contact IBM Support.
For more information about the role or responsibility of each service listed, refer to QRadar: Services responsible for the applications and application framework functionality
| Services | Runs on | Restart time (Approximately) | Impact |
|---|---|---|---|
| Docker | Console and App host | Medium(1 to 3 min) | The apps are unavailable while the docker service is restarting |
| Conman | Console and App host | Fast (seconds) | Starting/Stopping/Installing/Upgrading/Removing apps might fail if the conman service is being restarted or is stopped |
| Traefik | Console and App host | Fast (seconds) | Apps are running in the backend but not available in the Qradar UI (might appear blank) |
| Docker-distribution | Console only | Medium (1 to 3 min) | If the docker-distribution service is being restarted or is stopped, starting/stopping/installing/upgrading/removing apps might fail |
| Qradarca-monitor | Console only | Slow | This service is not active by default, it runs every hour to check and renew the Qradar certificates if needed.
|
Related Information
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSV4BL","label":"IBM QRadar"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5.0"}]
Was this topic helpful?
Document Information
Modified date:
27 December 2023
UID
ibm17057699