IBM Support

QRadar: User Behavior Analytics app missing configuration after upgrade to UBA V4.1.3 or V4.1.4 (Updated)

Troubleshooting


Problem

Administrators who upgrade to User Behavior Analytics version 4.1.3 or 4.1.4 can experience a configuration migration issue depending on their upgrade path. Users reported issues where upgrading from a UBA version 4.1.2 or earlier to UBA version 4.1.3 or 4.1.4 did not display any configuration information in the application after the upgrade installation completes. This issue affects users who were on a CentOS6 version of the UBA application, then upgrade to UBA 4.1.3 or 4.1.4. When this issue occurs, the startup log displays a 'database user “appuser” is not the install user' error message. The UBA application launches in the user interface with the latest version, but the configuration data for the app is not migrated properly and appears to be incorrectly configured or reset to a default state.

Important: A new version of UBA is released to prevent the database migration issue for users who upgrade from a CentOS 6 version of UBA or versions before 4.1.2. Administrators can download User Behavior Analytics 4.1.5 from the X-Force App Exchange and upgrade their application to mitigate CVE-2021-44228 as described in the IBM Security Bulletin for User Behavior Analytics.

Symptom

Users who upgrade to User Behavior Analytics V4.1.3 or V4.1.4 can complete the installation of the application; however, the database configuration is not properly migrated to the most recent database version. When the error occurs, the application does not appear to be set up properly and a default app information is displayed. The application configuration is not loaded properly during the upgrade.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
21 December 2021

UID

ibm16527260