IBM Support

QRadar SOAR: Import failed with an error, "An object already exist with the provided name".

Troubleshooting


Problem

Whilst trying to import a configuration in the form of a .res file, the process fails with the error message "An object already exist with the provided name."

Symptom

The client.log will show something similar to:
[http-nio-443-exec-194] ERROR o.h.engine.jdbc.spi.SqlExceptionHelper - ERROR: duplicate key value violates unique constraint "field_defs_org_id_type_id_fdef_name_idx"   Detail: Key (org_id, type_id, fdef_name)=(201, 0, force_password_change_required) already exists.
[http-nio-443-exec-194] ERROR o.h.engine.jdbc.spi.SqlExceptionHelper - ERROR: duplicate key value violates unique constraint "field_defs_org_id_type_id_fdef_name_idx"   Detail: Key (org_id, type_id, fdef_name)=(201, 0, force_password_change_required) already exists.
[http-nio-443-exec-194] INFO  com.co3.web.rest.Co3ExceptionMapperBase - Mapping exception to REST
javax.persistence.PersistenceException: org.hibernate.exception.ConstraintViolationException: could not execute statement

Caused by: org.hibernate.exception.ConstraintViolationException: could not execute statement
    at org.hibernate.exception.internal.SQLStateConversionDelegate.convert(SQLStateConversionDelegate.java:112)
...
Caused by: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "field_defs_org_id_type_id_fdef_name_idx"
  Detail: Key (org_id, type_id, fdef_name)=(201, 0, force_password_change_required) already exists.

Cause

The cause is because there is a field in the organisation you are importing the .res into which has the same API name as a field in the .res file.

Diagnosing The Problem

Check the client.log and search for the error
ERROR: duplicate key value violates unique constraint, xxx already exists.
The error stack trace will show the field API name that has issue with, for example:
"field_defs_org_id_type_id_fdef_name_idx"   Detail: Key (org_id, type_id, fdef_name)=(201, 0, force_password_change_required) already exists.

Resolving The Problem

The custom field, force_password_change_required is the the duplicate API name and needs to be removed/changed.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z000000cvqeAAA","label":"Resilient Core-\u003EImport \/ Export"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
28 June 2024

UID

ibm16131709