IV47059: REFERENCE SETS MIGHT NOT FUNCTION PROPERLY WHEN A REFERENCE SET ELEMENT CONTAINS A BACKSLASH CHARACTER

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • References set elements that contain a backslash (\) character
    might prevent the system from properly processing reference set
    data. The reference set is unable to process the single
    backslash charaters and might cause rules or some reference
    sets to not populate data as expected.
    
    The error message in /var/log/qradar.error displays the
    following message:
    
    Jul 27 07:59:31 [IP address]  [tomcat]
    [ReferenceSetUpdateServiceThread_1]
    org.apache.openjpa.lib.jdbc.ReportingSQLException: ERROR:
    invalid input syntax for type bytea
    
    If the system is unable to handle the error from the backslash
    character, then the error message in /var/log/qradar.error
    might display the following additional information:
    
    Jul 27 08:04:32 [IP address] [tomcat]
    [ReferenceSetUpdateServiceThread_1]
    com.q1labs.frameworks.session.SessionContext: [WARN]
    [IP address/- -] [-/- -]Attempt made to begin nested read-write
    transaction
    Jul 27 08:04:32 [IP address] [tomcat]
    [ReferenceSetUpdateServiceThread_1] java.lang.Exception
    [tomcat] [ReferenceSetUpdateServiceThread_1] at
    com.q1labs.frameworks.session.SessionContext.beginTransaction(Se
    ssionContext.java:933)
    Jul 27 08:04:32 [IP address] [tomcat]
    [ReferenceSetUpdateServiceThread_1]    at
    com.q1labs.core.shared.referenceset.ReferenceSetUpdateServiceThr
    ead.run(ReferenceSetUpdateServiceThread.java:110)
    

Local fix

  • For more information, contact IBM customer support.
    

Problem summary

  • Fixed in 7.1 Maintenance Release 1 Patch 3
    

Problem conclusion

  • Fixed in 7.1 Maintenance Release 1 Patch 3
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV47059

  • Reported component name

    QRADAR SOFTWARE

  • Reported component ID

    5725QRDSW

  • Reported release

    710

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-08-14

  • Closed date

    2013-12-18

  • Last modified date

    2013-12-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    IV47136

Fix information

  • Fixed component name

    QRADAR SOFTWARE

  • Fixed component ID

    5725QRDSW

Applicable component levels

  • R710 PSY

       UP



Rate this page:

(0 users)Average rating

Document information


More support for:

IBM Security QRadar SIEM

Software version:

7.1

Reference #:

IV47059

Modified date:

2013-12-18

Translate my page

Machine Translation

Content navigation