IBM Support

WinCollect 7.3.1-43 upgrade fails due to "[CRITICAL] Transaction failed"

Troubleshooting


Problem

WinCollect 7.3.1-43 upgrade in QRadar 7.5.0 UP8 fails to complete with these errors in the following logs located under /var/log/setup*
patches.log
[WARN](-i-patchmode) [6/9] Install & Upgrade Packages PROBLEMS! Can we roll back?? [6/9] Install & Upgrade Packages ? yes
[WARN](-i-patchmode)[6/9] Install & Upgrade Packages Attempted rollback of 6 and 6 executors were rolled back.
Problem executor was [6/9] Install & Upgrade Packages errorLog=
Revert Errors: at Patch/Factory.pm line 285.}}
dnf.verbose.log
[ERROR] Error in PREIN scriptlet in rpm package AGENT-WINCOLLECT
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectConfigServer
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectFileForwarder
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectJuniperSBR
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftDHCP
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftDNS
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftExchange
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftIAS
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftIIS
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftISA
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftSQL
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectNetAppDataONTAP
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectWindowsEventLog
[CRITICAL] Transaction failed}}

Symptom

WinCollect 7.3.1-43 in QRadar 7.5.0 UP8 upgrade fails to complete during rpm update.

Cause

The WinCollect upgrade fails due to old rpm validation, specially with QRadar 7.4.x rpms present.

Environment

QRadar 7.5.0 UP8
WinCollect 7.3.1-43

Diagnosing The Problem

During the patch install is will fail with the following error in Screen session:
[WARN](-i-patchmode) [6/9] Install & Upgrade Packages PROBLEMS! Can we roll back?? [6/9] Install & Upgrade Packages ? yes
[WARN](-i-patchmode)[6/9] Install & Upgrade Packages Attempted rollback of 6 and 6 executors were rolled back.
Problem executor was [6/9] Install & Upgrade Packages errorLog=
Revert Errors: at Patch/Factory.pm line 285.}}
If this error is present, go to /var/log/setup* folder and check the following logs specifically:
patches.log
[WARN](-i-patchmode) [6/9] Install & Upgrade Packages PROBLEMS! Can we roll back?? [6/9] Install & Upgrade Packages ? yes
[WARN](-i-patchmode)[6/9] Install & Upgrade Packages Attempted rollback of 6 and 6 executors were rolled back.
Problem executor was [6/9] Install & Upgrade Packages errorLog=
Revert Errors: at Patch/Factory.pm line 285.}}
dnf.verbose.log
[ERROR] Error in PREIN scriptlet in rpm package AGENT-WINCOLLECT
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectConfigServer
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectFileForwarder
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectJuniperSBR
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftDHCP
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftDNS
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftExchange
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftIAS
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftIIS
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftISA
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectMicrosoftSQL
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectNetAppDataONTAP
[ERROR] Error in PREIN scriptlet in rpm package PROTOCOL-WinCollectWindowsEventLog
[CRITICAL] Transaction failed}}

Resolving The Problem

1.Create the following file on the QRadar console:

touch /tmp/iteam-rpm-skip-version-check
2.Run the patch installer again:

/media/updates/installer
3.When the upgrade completes, remove the file:

rm /tmp/iteam-rpm-skip-version-check


At this point the upgrade should be completed successfully.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtwAAA","label":"WinCollect"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5.0"}]

Document Information

Modified date:
17 June 2024

UID

ibm17147750

Page Feedback