IBM Support

QRadar 7.3.1 issue on Lenovo x3550 M5 and x3650 M5 appliances (Software available)

Flashes (Alerts)


Abstract

QRadar 7.3.1 issue on Lenovo x3550 M5 and x3650 M5 appliances.

Content

Fix pack available for administrators
IBM has released a fix pack (SFS) and ISO to resolve the unexpected reboot issue on M5 appliances with QRadar v7.3.1. The following software has been released to resolve APAR IJ02902:



Orignal notice information
QRadar appliances based on Lenovo x3550 M5 and x3650 M5 hardware running QRadar 7.3.1 experience random reboots due to a Red Hat kernel bug resulting in potential data loss. We are working on resolving as expediently as possible.

Refer to APAR IJ02902 for Additional Information

IJ02902: RHEL KERNEL PANIC CAN CAUSE UNEXPECTED REBOOTS OF LENOVO X3550 M5 AND X3650 M5 APPLIANCES RUNNING QRADAR 7.3.1.X

You can be notified when this APAR changes by using the Subscribe option on the APAR page. This option is located either on the right side of the APAR page or near the bottom of the page depending on the device you view the page with.

How to Identify M5 Appliances

  1. Administrators can identify M5 appliances in their deployment using the following command from the Console: /opt/qradar/support/deployment_info.sh
  2. This command will export information about each appliance to a csv file on the Console. Optionally, to output the values to the terminal, users can use the following command: /opt/qradar/support/deployment_info.sh -PO




    Administrators can also refer to the follow table of machine types to identify M5 appliances:
  3. QRadar/Appliance MTMDescriptionLenovo MTM
    4412-F1AQRadar Incident Forensics G3 Appliance8871-P31
    4412-F2CQRadar Network Packet Capture Appliance8871-PAC
    4412-F3FQRadar Network Insights Appliance (1920)8871-PAF
    4412-Q1EQRadar XX05 Appliance G38869-PRJ
    4412-Q2AQRadar XX29 Appliance8871-P31
    4412-Q3BQRadar xx48 Appliance8871-PAB
    4412-Q4DQRadar Event Collector 1501 Appliance G38869-PAD
    4412-F4YQRadar 1901 Appliance (QNI)8869-PPY


Where do you find more information?




[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Installation","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.3.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
25 September 2022

UID

swg22012303