IBM Support

QRadar: Service dead but pid file exists

Troubleshooting


Problem

When trying to restart a QRadar-service (or query the service's status), you might come across the following error:
 
  • In QRadar versions 7.2.8 similar to
    /opt/qradar/init/ status [instance name]
    (QRadar-service|instance name) dead but pid file exists
  • In QRadar versions 7.3. the error is similar to
    systemctl status <QRadar-service>
    ERROR: ... <QRadar-service>: <QRadar-service> dead but pid file exists

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"Operating System","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2;7.3","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
23 April 2019

UID

ibm10880553