IBM Support

QRadar Risk Manager: Risks tab does not display after an upgrade to 7.5.0 UP6 (IJ47049)

Troubleshooting


Problem

An issue can occur where the Risks tab does not load as expected after an upgrade from QRadar 7.5.0 Update Package 5 to 7.5.0 Update Package 6. This technical note provides a workaround for the issue described in APAR IJ47049.

Symptom

The Risks tab does not load as expected, for example:
image-20230531144652-2

Cause

The QRadar Console cannot get required updates from the Risk Manager appliance and the tab files to load due to a Tomcat exception. Administrators can install a file from the 7.5.0 Update Package 6 SFS on the QRM appliance to resolve this issue.

Environment

QRadar deployments with QRadar Risk Manager appliances, which were updated from 7.5.0 Update Package 5 to Update Package 6.

Resolving The Problem

To resolve this issue, administrators can mount and install the updated si-risk_application_base RPM file that is included in the QRadar 7.5.0 Update Package 6 SFS. After the administrator installs the file on the QRadar Risk Manager (QRM) appliance, you must restart the ziptie services on the QRM appliance for the changes to load.

  Procedure
  1. Use SSH to log in to the QRadar Console as the root user.
  2. Open an SSH session to the QRadar Risk Manager appliance.
  3. Download QRadar 7.5.0 Update Package 6 from IBM Fix Central directly to the QRadar Risk Manager appliance.  For more information about fixes and known issues, see the QRadar Software 101 page.
  4. To mount the SFS file, type: 
    mount -o loop 202166_QRadar_patchupdate-2021.6.6.20230519190832.sfs /media/updates/
  5. Navigate to the directory: 
    cd /media/updates/repo/
  6. To install the risk_application_base RPM, type: 
    yum -y install si-risk_application_base-2021.6.6-20230519190832.el7.x86_64.rpm
  7. Wait for the file to install.
  8. To refresh the keystore for the QRM appliance, type: 
    /opt/qradar/bin/refresh_ziptie_keystore.sh
  9. Restart the ziptie services to load the changes: 
    systemctl restart ziptie-server.service

    Results
    After the ziptie service starts, the Risks tab displays on the QRadar Console. If the Risks tab fails to load after you complete this procedure, contact QRadar Support for further assistance.
     

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQQU","label":"IBM Security QRadar Risk Manager"},"ARM Category":[{"code":"a8m0z000000cwtKAAQ","label":"QRadar Risk and Vulnerability Manager"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
19 June 2023

UID

ibm16999249

Page Feedback