Troubleshooting
Problem
When downgrading a QRadar DSM or Protocol the message Error: Transaction failed is returned.
Symptom
In this example we will attempt to downgrade the DSM-SIMGeneric rpm from verion DSM-SIMGenericLog-7.5-20241220124142.noarch to version DSM-SIMGenericLog-7.5-20241204152906.noarch .
Verify the installed rpm version.
[root@qradar-console]# rpm -qa | grep -i simgeneric
DSM-SIMGenericLog-7.5-20241220124142.noarch
Execute the following command to downgrade the DSM to the lower version.
[root@qradar-console]# yum downgrade DSM-SIMGenericLog-7.5-20241204152906.noarch.rpm
Dependencies resolved.
=============================================================================================================================================================================================================================================================================================================================
Package Architecture Version Repository Size
=============================================================================================================================================================================================================================================================================================================================
Downgrading:
DSM-SIMGenericLog noarch 7.5-20241204152906 @commandline 234 k
Transaction Summary
=============================================================================================================================================================================================================================================================================================================================
Downgrade 1 Package
Total size: 234 k
Is this ok [y/N]: y
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: DSM-SIMGenericLog-7.5-20241204152906.noarch 1/2
Installing 'SIMGenericLog-7.5.20241204152906.
Downgrading : DSM-SIMGenericLog-7.5-20241204152906.noarch 1/2
Running scriptlet: DSM-SIMGenericLog-7.5-20241204152906.noarch 1/2
cp: cannot create regular file '/templates/': Not a directory
Fri Jan 31 08:11:25 CET 2025: Error: "Execution Failed of :cp iteam_functions.sh /templates/:", exiting
warning: %post(DSM-SIMGenericLog-0:7.5-20241204152906.noarch) scriptlet failed, exit status 255
Error in POSTIN scriptlet in rpm package DSM-SIMGenericLog
Running scriptlet: DSM-SIMGenericLog-7.5-20241220124142.noarch 2/2
/var/tmp/rpm-tmp.pdmqXg: line 176: return: can only `return' from a function or sourced script
/var/tmp/rpm-tmp.pdmqXg: line 181: /templates/iteam_functions.sh: No such file or directory
/var/tmp/rpm-tmp.pdmqXg: line 186: removeMultipleDevices: command not found
error: %preun(DSM-SIMGenericLog-0:7.5-20241220124142.noarch) scriptlet failed, exit status 127
Error in PREUN scriptlet in rpm package DSM-SIMGenericLog
Verifying : DSM-SIMGenericLog-7.5-20241204152906.noarch 1/2
Verifying : DSM-SIMGenericLog-7.5-20241220124142.noarch 2/2
Installed products updated.
Downgraded:
DSM-SIMGenericLog-7.5-20241204152906.noarch
Failed:
DSM-SIMGenericLog-7.5-20241220124142.noarch
Error: Transaction failed
[root@qradar-console]#
When the process is finished verify the installed DSM, the following output might be returned.
[root@qradar-console]# rpm -qa | grep DSM-SIMGenericLog
DSM-SIMGenericLog-7.5-20241220124142.noarch
DSM-SIMGenericLog-7.5-20241204152906.noarch
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt0AAA","label":"Log Source"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.4.3;7.5.0"}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
12 May 2025
UID
ibm17183866