How To
Summary
In QRadar v7.3.1 Patch 6, you might have an issue where system and HTTPd log files fail to rotate.
Changes made to logrotate in QRadar 7.3.1 Patch 6 can cause the /var/log and or the /opt partition to prematurely run out of free space.
Note: When monitored partition disk space reaches 95% utilization, certain QRadar processes are automatically shut down, preventing the system from operating properly.
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Component":"Qradar Console v7.3.1 patch 6","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.1 patch 6","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
17 June 2022
UID
ibm10738895