IV46488: LOG SOURCES AUTOMATICALLY DISCOVERED BY THE SYSTEM CANNOT BE ADDED TO A LOG SOURCE GROUP FROM THE EDIT LOG SOURCE WINDOW.

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • On the Admin tab, log sources that are automatically discovered
    cannot be added to a log source group by using the Edit log
    source button or by double-clicking the log source name.
    
    This issue does not occur with log sources that are manually
    added. Log sources that are automatically discovered by the
    system display true in the Autodiscovered column of the Log
    Sources window.
    

Local fix

  • You can add an autodiscovered log source in the user interface
    by using the Assign icon.
    
    Procedure:
    1. Click the Admin tab.
    2. On the navigation menu, click Data Sources.
    3. Click Log Sources.
    4. Select the log sources to group from the log source list.
    5. Click Assign.
    6. Select the check box of one or more log source groups name.
    7. Click Assign Groups.
    
    The log sources are assigned to the groups based on the check
    boxes you selected.
    
    Note: If you select multiple log source check boxes in step 6,
    the log source is assigned to multiple groups.
    
    If you continue to experience issues with a log source group,
    you can contact IBM customer support.
    

Problem summary

  • Fixed in 7.2 initial release.
    

Problem conclusion

  • Fixed in 7.2 initial release.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV46488

  • Reported component name

    QRADAR SOFTWARE

  • Reported component ID

    5725QRDSW

  • Reported release

    710

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-07-31

  • Closed date

    2013-08-15

  • Last modified date

    2013-08-15

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    IV47135

Fix information

  • Fixed component name

    QRADAR SOFTWARE

  • Fixed component ID

    5725QRDSW

Applicable component levels

  • R720 PSY

       UP



Rate this page:

(0 users)Average rating

Document information


More support for:

IBM Security QRadar SIEM

Software version:

7.1

Reference #:

IV46488

Modified date:

2013-08-15

Translate my page

Machine Translation

Content navigation