IBM Support

QRadar: Patch upgrade failed with 'ERROR: This patch was meant for a different version'

Troubleshooting


Problem

During a patch upgrade, if an older versioned SFS file from a previous patch upgrade is still mounted to /media/updates
and the patch upgrade cannot proceed. The following error is displayed to users when this issue occurs:
[ERROR] This patch was meant for a different version (2019.14.1.20230822112654).
 ./patchInstaller.pl -patchfile /storetmp/750_QRadar_interimfix-7.5.0.20230822112654-IF01-20231102164146INT.sfs  -p ./superpatches.manifest.xml completed with result 0

Resolving The Problem

Procedure
  1. Use SSH into the QRadar Console as the root user.
  2. Check to ensure the SFS file that is mounted to /media/updates is the expected version.
  3. Check to see whether older SFS files from previous patch upgrades are still mounted or have stale mount points. You can check this with the following commands:
    # df -Th
    # mount | grep media
  4. Run the following command as many times as needed until it reports back that nothing is mounted on /media/updates:
    # umount /media/updates
    umount: /media/updates: not mounted
  5. Mount the correct SFS file version to be used for the patch upgrade, as instructed by the version's release notes.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtdAAA","label":"Upgrade"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
14 December 2023

UID

ibm16244700