Troubleshooting
Problem
After migrating a QRadar SOAR server to a new IP address, updating the QRadar SIEM QRadar SOAR Plugin app to the new IP produces error: "No Connection found".
Symptom
Logs display errors:
Could not test connection to SOAR. A connection does not exist. Reason: {"http_response":{"code":404,"message":"We could not find the resource you requested."},"code":1002,"description":"The connection configuration for Resilient was not defined.","details":{},"message":"Task ResilientConnectionTestTask cannot find any destination related to the connection 5."}
QRadarAPIClient.get_domains_by_sp(): Security Profile ID does not exist for this instance
Valid destination not found for '6' connection_id, organization_id '205' and queue name 'inbound_destinations.205.qrp_inbound_X_X_X_X_3951'
Configured destination not found for connection_id: 6, soar_org_id: 205, soar_host: X.X.X.X, full_inbound_q_name: inbound_destinations.205.qrp_inbound_X_X_X_X_3951
QRadar SIEM /var/log/qradar.log displays:
[ecs-ec-ingress. ecs-ec-ingress] [SHAREPOINTNNNNN] com.q1labs.semsources.sources.utils.microsoft.accessToken.staged.AccessTokenStaged: [ERROR] (..) Unable to obtain an access token. Response status [401]. Error Response: java. io.BufferedReader@1bf66133
[ecs-ep.ecs-ep] [Thread-62] com.ibm.si.ep.destinations.ResilientServerQueue: [ERROR] (..) Could not connect to broker
URL: ssl://X.X.X.X:65000?socket. enabledProtocols=TLSv1.2. Reason: java.net.NoRouteToHostException: No route to host (Host unreachable)
[ecs-ep.ecs-ep] [Thread-62] javax. jms. JMSException: Could not connect to broker URL: ssl://X.X.X.X:65000?socket.enabledProtocols=TLSv1.2. Reason: java
net. NoRouteToHostException: No route to host (Host unreachable)
at org.apache.activemq.util.JMSExceptionSupport.create(JMSExceptionSupport.java:38)
at org. apache. activemq. ActiveMQConnectionFactory.createActiveMQConnection(ActiveMQConnectionFactory.java:374)
at org.apache. activemq.ActiveMQConnectionFactory.createActiveMQConnection(ActiveMQConnectionFactory.java:304)
at org. apache. activemq. ActiveMQConnectionFactory.createConnection(ActiveMQConnectionFactory. java:244)
at com. ibm. si.ep.destinations.ResilientServerQueue.getConnection(ResilientServerQueue.java:340)
at com. ibm.si.ep.destinations.ResilientServerQueue.send(ResilientServerQueue. java:95)
at com. ibm. si. ep.destinations. ResilientDestination$MtConsumerThread. run(ResilientDestination. java:634)
[ecs-ep.ecs-ep] [Thread-62] Caused by: java.net.NoRouteToHostException: No route to host (Host unreachable)
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z0000001gyGAAQ","label":"Integrations-\u003EQRadar app"}],"ARM Case Number":"TS018168472","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
27 January 2025
UID
ibm17181749