IBM Support

QRadar: Troubleshooting the UBA Error: "JSON.parse: Unexpected Character After JSON Data"

Troubleshooting


Problem

Administrators get the "JSON.parse: unexpected non-whitespace character after JSON data at line 1 column 5 of the JSON data, and I do not get data." when opening the user view.

Cause

The GraphQL Application is not operational in the backend.

Diagnosing The Problem

Administrators use the qappmanager tool to check the status of the GraphQL Application:
[root@console ~] /opt/qradar/support/qappmanager
....
APP INSTANCES (IID=Instance ID, DID=Definition ID, MHN=Managed Host Name, AHT=Application Host Type, SP=Security Profile):
 IID  | DID  | Name                         | Status  | Task Status | Installed        | MHN                      | AHT   | Memory | SP | Errors
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------
 1051 | 1051 | GraphQL                      | ERROR   | COMPLETED   | 2024-02-13 07:06 | console-qradar-lab       | LOCAL |    350 |    | 
...

Resolving The Problem

Administrators run the following steps to resolve the issue:
  1. Log in to the QRadar console as the root user.
  2. If an App Host is configured, log in to the App Host as the root user.
  3. Restart the Docker service in the appliance that hosts the applications: 
    systemctl restart docker
  4. Restart the Conman service in the appliance that hosts the applications: 
    systemctl restart conman
  5. Stop the application by using the qappmanager tool.
  6. Start the application by using the qappmanager tool.

    Result
    The QRadar GraphQL Application is now running and the UBA error is solved. If the issue persists, contact QRadar Support for assistance.
     

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSV4BL","label":"IBM QRadar"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
14 March 2024

UID

ibm17124507

Page Feedback