Troubleshooting
Problem
The following error is seen on a Log File SFTP protocol log source configured with SSH Key File:
Error: invalid private key: [B@19fa1e96
Symptom
- The log source status is Error.
- When the Test tool runs on the Log Source Management app, this error message appears:
Testing DNS resolution of [xxxxxx] - Passed - Successfully resolved [xxxxxx] to IP [x.x.x.x] Testing TCP connection to [xxxxxx:22] - Passed - Attempting TCP connection to [xxxxxx:22] with a timeout of 10000 ms - Successful TCP connection to [xxxxxx:22] Testing [SFTP] connection to [xxxxxx:22] - Failed - Using SSH key authenticating as <user>. - Connecting to 'xxxxxx' on port 22... - Error: invalid privatekey: [B@19fa1e96 Validating remote directory [/folder] - Cancelled Validating file pattern [.*] - Cancelled Events (0): - Error: One or more tests have failed - cancelling sample event collection - The following error is logged in /var/log/qradar.error:
Sep 13 16:10:44 <...> com.q1labs.semsources.sources.remote.testing.sftp.SFTPConnectionSubtester: [ERROR] com.jcraft.jsch.JSchException: invalid privatekey: [B@4f3bcaa2
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"TS014169196","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
29 May 2024
UID
ibm17035593