News
Abstract
IBM has resolved an issue affecting a small number of users during the upgrade to 7.5.0 Update Package 9. This flash notice is updated to alert administrators that a new SFS file is available to prevent an issue where the upgrade process takes longer than expected due to a specific step running slowly during the postpatch phase. Users who experience this issue are advised to NOT interrupt the upgrade in progress, power down, or force reboot the system during any phase of the QRadar upgrade.
Content
Update: This issue has been resolved with the release of 7.5.0 Update Package 9 (build 2021.6.9.20240719124908). Administrators must use this updated build when upgrading to 7.5.0 Upgrade Package 9.
Technical note updates
- 17 July 2024 3:15 PM ET: A flash notice was released to alert users to an upgrade issue that can significantly extend scheduled maintenance windows when you upgrade to QRadar 7.5.0 Update Package 9.
- 22 July 2024 11:00 AM ET: A new SFS file for 7.5.0 UP9 build (20240719124908) with fix has been published to Fix Central.
Updated SFS files for 7.5.0 Update Package 9 has been published to Fix Central, with the build number 2021.6.9.20240719124908. As this issue is related to software upgrade time frames, only the SFS was republished.
- QRadar / QRM / QVM / QNI 7.5.0 UpdatePackage 9 SFS
- QRadar Incident Forensics 7.5.0 UpdatePackage 9 SFS
Administrators upgrading to 7.5.0 Update Package 9 must use this updated build. The original build is no longer available on Fix Central. If you require the previous build for any reason, contact QRadar Support.
Critical: Administrators that upgrade to 7.5.0 Update Package 9 can experience longer than expected maintenance windows for the upgrade to UP9. An issue was reported that a postpatch update script can take longer than expected to complete. Do not interrupt the upgrade or reboot an appliance before the upgrade is complete as any interruptions can result in a rebuild of the system and must be avoided.
For more information, see DT392091: Patching to QRadar 7.5.0 UP9 will appear to hang due to inefficient file ownership changes during postpatch.
Affected products
QRadar SIEM Software installations at 7.5.0 Update Package 7 (any Interim Fix) or 7.5.0 Update Package 8 (any Interim Fix) that are upgrading to 7.5.0 Update Package 9.
- QRadar 7.5.0 UP7 -> UP9
- QRadar 7.5.0 UP7 -> UP8 -> UP9
Notes: No action is required for QRadar on Cloud administrators.
We apologize for any inconvenience due to this issue. If you have questions about the contents of this technical note, contact QRadar Support.
- QRadar Support
- QRadar Support
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtdAAA","label":"Upgrade"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5.0"}]
Was this topic helpful?
Document Information
Modified date:
24 July 2024
UID
ibm17160458