IBM Support

QRadar SIEM: PSQL Exception too many clients

Troubleshooting


Problem

Daily backup failed to run , it is showing error in /var/log/qradar.error log file:
[hostcontext. hostcontext] [Scheduled Backup] com.qllabs.hostcontext.backup.backupRecoveryEngine Backup Failed: com.qllabs.configservices.hostcontext.exception.BackupExceptiflowmapfile

Symptom

/var/log/qradar-sql.log will show too many clients:
postgres (..) FATAL:  sorry, too many clients already

Cause

In some instances we see if a transaction is not completed correctly it can leave a connection behind to postgres which is not removed which over time may lead to reaching the 750 max and then services can no longer connect and function correctly. Currently terminating old connections is not controlled by postgres.

Resolving The Problem

Note: Until the API call, or APP, are stopped the connections will continue to grow again on restart.

Restart services to kill all current connection's and allow services to reconnect to new postgres instance

systemclt stop ecs-ec-ingress
systemclt stop hostcontext
systemclt stop tomcat
systemctl restart postgresql-qrd
systemctl start tomcat
systemctl start hostcontext
systemctl start ecs-ec-ingress

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtiAAA","label":"Performance"}],"ARM Case Number":"TS016390856","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Document Information

Modified date:
10 June 2024

UID

ibm17156859