IBM Tivoli Netcool/Impact V7.1.0 Fix Pack 19 (7.1.0-TIV-NCI-FP0019)

Download Description

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  WARNING!
Log4j vulnerabilities (CVE-2021-44228,CVE-2021-45105,CVE-2021-45046 and CVE-2021-44832) affect this fix pack.
IBM strongly recommends upgrading to a refreshed fix pack starting at fix pack 23 or later. If upgrading to a refreshed fix pack is not possible, 
you can apply interim fix 10 (7.1.0-TIV-NCI-IF0010).

During the upgrade, the previous versions of Log4j will be moved to a backup location for rollback purposes. These versions are not actively used
by the product however security scans may continue to flag the backup copy. If the files must be removed but the rollback capability is still required, an archive of the backup location should be created before deleting the log4j files.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Before installing or upgrading IBM Tivoli Netcool/Impact 7.1.0.19, refer to the Following documentation:

• https://www.ibm.com/docs/en/tivoli-netcoolimpact/7.1
• Download attached package to review readme file for fixpack 7.1.0.19 Fixpack.
• Before installing 7.1.0.19 fixpack, review list of enhancements, pre-req, installation instruction, and known issues in readme file.

***********************************************************************************************************************
 A change introduced by this Fix Pack might negatively affect existing product function.
1. Refer to APAR(s) IJ26372 & IJ26214 for a description of the problem produced by APAR IJ24292 and the corrective action.
2. Refer to APAR IJ25145 for a description of the problem produced by APAR IJ17322 and the corrective action.
3. Refer to APAR IJ27949 for a description of the problem produced by APAR IJ24292 and the corrective action.
4. Refer to APAR IJ28513 for a description of the problem and corrective action.
5. Refer to APAR IJ28824 for a description of the problem produced by APAR IJ18823 and the corrective action.
6. Refer to APAR IJ29070 for a description of the problem caused by a higher version of ANT in FixPack 19 and corrective action.
7. Refer to APAR IJ29388 for a description of the problem and corrective action.
8. Unable to save ImpactDB data source,  refer to doc https://www.ibm.com/support/pages/node/6407084 for a description of the problem.
    The issue is fixed with APAR IJ30330 planned for 7.1.0-TIV-NCI-FP0021.
9. Running the SE_CLEANUPDATA policy causes subsequent Seasonality Configurations to fail in FP19 and FP20. 
    Refer to doc https://www.ibm.com/support/pages/node/6417353 for a description of the problem.
    The issue is fixed with APAR IJ31001 planned for 7.1.0-TIV-NCI-FP0021.
10. When using GetHTTP to send Form Parameters, the parameters are not sent as UTF8.
     The issue is fixed with APAR IJ32032 planned for 7.1.0-TIV-NCI-FP0022.
     Refer to doc https://www.ibm.com/support/pages/apar/IJ32032 for a description of the problem.
11. Problems adding Data to the TimeRangeGroup Data Type.
     The issue is fixed with APAR IJ32875 planned for 7.1.0-TIV-NCI-FP0022.
     Refer to doc https://www.ibm.com/support/pages/apar/IJ32875 for a description of the problem.
12. Mutual Authentication is not working with GetHTTP and RESTful DSA: After upgrading
      to Netcool/Impact 7.1.0 FP19 and above, mutual authentication with GetHTTP or the
      RESTful DSA fails even when the correct client certificate and key are added to the key
      store. The certificate request fails with an SSL handshake failure.
      The fix is delivered with APAR IJ33969 planned for 7.1.0-TIV-NCI-FP0023.
      Refer to doc https://www.ibm.com/support/pages/apar/IJ33969 for a description of the problem.
13. The impact-http-headers.jar is missing from server only installs.
      The issue is fixed with APAR IJ39619 planned for 7.1.0-TIV-NCI-FP0026.

***********************************************************************************************************************

For details of an individual APAR, go to https://www.ibm.com/support/home/. Enter the APAR identifier in "Search Support" and select search.
The following Netcool/Impact APARs are delivered with Fix Pack 19:

• IJ22226: SNMPSESSION CONNECTIONS ARE NOT REMOVED GENERATING MEMORY ISSUES
• IJ22365: INSTALLER FREE SPACE CALCULATIONS NEED TO BE AMENDED
• IJ22403: IMPACTWEBSERVICEUSER SECURITY ROLE MISSING FROM BACKEND SERVER.XML
• IJ22703: REGRESSION: FIX CPU USAGE INCREASE DUE TO DUMMY USERS WITH COMMANDLINEMANAGER
• IJ22730: IMPACT 7.1 MWM UNIX TIMESTAMP CONVERSTION ISSUE FOR MWM CREATED AT THE END OF THE MONTH AND SCHEDULED
  FOR NEXT MONTH
• IJ22769: POLICY RUNS SUCCESSFULLY DESPITE AN INVALID DATA SOURCE NAME BEING USED IN THE RESTFULAPIPOST() FUNCTION CALL
• IJ22926: NOI PATTERN GROUPING FAILS DUE TO PARENTIDENTIFIER SINGLE QUOTE
• IJ22970: EVENT READER DOES NOT ACTION CHANGES WHEN RESTARTED
• IJ22979: NEW PROPERTIES ADDED FOR WEB SERVICES DSA CONNECTIONS
• IJ22985: ADMINISTRATORS OF THE APPLICATION CAN VIEW PASSWORDS IN THE DATA SOURCE EDITOR BY MODIFYING SOURCE CODE
• IJ23020: REVISE PROCESSING OF THE COMMUNITY STRING PARAMETER IN THE SNMPSETACTION FUNCTION
• IJ23100: INSTALLER INCORRECTLY REPORTS THE FULL INSTALL COMPLETES SUCCESSFULLY EVEN IF SVN FAILS
• IJ23564: REGRESSION FIX: LDAP DSA DATA TYPES NOT RETURNING DATA AFTER FP17
• IJ23630: DIRECTSQL FUNCTION CAUSES EXCEPTION IN POLICY
• IJ23679: MULTIPLE EXECUTIONS OF THE MWM POLICY AT THE SAME TIME CAN LEAD TO DEADLOCKS ON THE MM_WINDOWS DERBY TABLE AND
  FAILED POLICY
• IJ23702: NOI EVENT ANALYTICS SEASONALITY PHASE FAILURE ON NON-ENGLISH LOCALE IMPACT HOST
• IJ23798: SEASONALITY CONFIG RE-RUN CAUSES RULE TO DISAPPEAR
• IJ23999: ENSURE CONTEXT PROPERTIES GET SET IN THE HASHKEY FOR SNMP V3 SESSIONS FROM IMPACT
• IJ24150: IMPACT INSTANCE NAME LENGTH AFFECTS CONNECTION TO OBJECT SERVER
• IJ24168: CONVERTXMLTOIMPACTOBJECTS FUNCTION OF IMPACT POLICY DOES NOT HANDLE DUPLICATE XML TAG WITHOUT ATTRIBUTE
• IJ24241: IMPACT SERVER NULL POINTER EXCEPTION WHILE READING PROPERTIES DURING STARTUP - SERVER WILL NOT START
• IJ24292: GETHTTP CALLS HUNG AT AV.JAVA/B.JAVA
• IJ24512: RELATED EVENT PROCESS WITH ERROR "OPERATION NEXT NOT PERMITTED" IN RE_STARTPROCESSING LOG
• IJ24755: REGRESSION FIX SECONDARY SERVER DOES NOT TAKE OVER AS PRIMARY IF PRIMARY GOES DOWN
• IJ25099: STORE THE RUNBOOKID OF EVERY TRIGGER THAT AN EVENT MATCHES WITHIN THE OMNIBUS EVENT

Security-related APARs:

• IJ22861: SECURITY PASSWORD IN API
• IJ23627: SECURITY APAR: FIX DOJO TOOLKIT VULNERABILITIES IN IMPACT
• IJ24282: SECURITY APAR: UPGRADE TO LATEST IBM SDK 8 IN IMPACT 710 FP19
• IJ24285: SECURITY APAR: UPGRADE TO LATEST WAS LIBERTY IN IMPACT 710 FP19
• IJ24826: SECURITY APAR: FIX JQUERY VULNERABILITIES IN IMPACT

• IJ22633: DOCUMENTATION ON "CREATING THE JREXEC SERVICE" ON WINDOWS INCORRECTLY MENTIONS LINUX
• IJ23020: REVISE PROCESSING OF THE COMMUNITY STRING PARAMETER IN THE SNMPSETACTION FUNCTION
• IJ23798: SEASONALITY CONFIG RE-RUN CAUSES RULE TO DISAPPEAR
• IJ24850: INTEGRATION OF JMS/TIBCO IN SSL REQUIRES ADDITIONAL PROPERTIES
• IJ24857: REPLACE FUNCTION AND HANDLING REGEX AND ESCAPE CHARS CORRECTLY
• IJ24935: FILTER REQUEST FOR ACTIVE DIRECTORY STARTING WITH FP18
• IJ24997: INSTRUCTION TO DISABLE EXISTING EXTERNAL REPOSITORY CONFIGURATION PRIOR TO ENABLING A NEW EXTERNAL REPOSITORY
  To check the APARs that were part of the previous FixPack (7.1.0.18), please check this link:
  https://www.ibm.com/support/pages/ibm-tivoli-netcoolimpact-v710-fix-pack-17-710-tiv-nci-fp0018

2.0 Additional Support added in Fix Pack 19
   Browser: Firefox ESR 73, Google Chrome 80, Microsoft Internet Explorer - 11, Microsoft Edge 44, Safari 13
  Operating Systems: RHEL 8.1, Windows Server 2019, zLinux RHEL 7.8, SLES 12.5, 15.1
  JazzSM 1.1.3.0 DASH 3.1.3.7
  NOTE:
  The IBM Prerequisite Scanner needs to be run, in order to confirm proper system libraries are installed, prior to installing Impact. 
  Refer to the following IBM Prerequisite Scanner link:
  https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~Tivoli&product=ibm/Tivoli/Prerequisite+Scanner&release=All&platform=All&function=all
 

2.2 Component Updates
   Java(TM) SE Runtime Environment "1.8.0_251" (build 8.0.6.10 (SR6 FP10))
   WebSphere Application Server Liberty has been updated to version 20.0.0.4
   Apache Ant(TM) version 1.9.15
   Apache HttpClient has been updated to version 5.0
 

2.3 Enhancements in Fix Pack 19
   Fix Pack 19 includes the following enhancements:
   - Replaced the IBM Eclipse Help System (IEHS) with the Knowledge Center Customer Install (KC CI)
   - RFE: Kerberos for Oracle Connection: RFE: 136349 Documenting how to enable Netcool/Impact Kerberos authentication for Oracle
   via the Data Source properties
   -RFE: NOI Uninstall Event Analytics Impact Server Extensions: RFE: 141183
   The ability to uninstall the Netcool/Impact NOI Extensions is now available
   This capability is only possible, after the Netcool/Impact 7.1.0 Fix Pack 19 has been applied. Clients will now be able to uninstall the NOI component,
   without having to uninstall the GUI or the Impact server.
   - RFE: SECURITY: nci_policy - CREDENTIALS ENCRYPTED: RFE: 132448
   Introduced the "-e" flag whenever password argument needs to be provided to the nci_policy. When this flag is used, the password should be in
   supplied in encrypted form. To encrypt a password, use 'nci_crypt' tool.a
   - RFE: UPDATE TO nci_policy PUSH COMMAND TO INCLUDE "comment" ARGUMENT: RFE 123741
   The "nci_policy push" commands enables impact policies to be created/updated from the command line. This is very useful when promoting policies from
   development to production environments. With this RFE, the ability to include a comment is not only good-practice but facilitates use of the
   "View Version history" dialogue from the Policy editor.
 

3.0 Troubleshooting Netcool Impact 7.1 > General issues
- You now can (if needed) reset the Derby DB to a default state (in a NOI installation); by using the following steps:
1.Find appropriately named ImpactDB_NOI_FP19.zip file located in $IMPACT_HOME/install/dbcore.
2.Stop all ImpactServers in the cluster (primary and secondary that run Derby DB).
3.Backup/Remove the existing ImpactDB directory structure in $IMPACT_HOME/db/<ServerName>/derby.
4.Copy the zip file found in step 1 to $IMPACT_HOME/db/<ServerName>/derby and unzip it.
5.Start Impact Server primary, let it fully initialize and start, and now start secondary server and let it re-sync from the primary.
- Enabling LDAP Authentication
When editing the $IMPACT_HOME/install/security/impactdap.properties before
enabling LDAP Authentication, ensure the version of the impactdap.properties is from the latest install!
* Do not copy a props file from a different/older FixPack.
* Ensure to only edit the properties, do not delete/remove any of the properties before running the
$IMPACT_HOME/install/security/confAuth4LDAP.sh script
 

4.0 Known Issues in Fix Pack 19
- The following applies only to Netcool/Impact Clients with Netcool Operations Insight (NOI) - and only for those with Existing configurations.
After upgrading to Netcool/Impact 7.1.0 FP13 (and above), run through the Wizard; confirm, verify & save the configuration. 
Refer to: Event Analytics Configuration 

1. It is a known issue that custom rollup changes to properties and params files are overwritten. Running through the wizard will repair these.
2. Also for seasonality view, it is advisable to run through the Wizard to make sure the right columns are displayed.  
Refer to the following link, for appropriate actions related to "Migration of rollups in Netcool/Impact":
https://www.ibm.com/support/knowledgecenter/SSTPTP_1.4.1/com.ibm.netcool_ops.doc/soc/event_analytics/concept/soc_ea_rollup_migrate.html

- The EventReader service for Seasonality Events is called  "ProcessSeasonalityEvents" and it does not (by default) read updated or
de-duplicated events. "Get updated events" is not selected (by default) in the UI for the "ProcessSeasonityEvents" Service, on the Event Mapping tab. 
The reason for this is due to the wide Filter for the "ProcessSeasonityEvents" Event Reader service. By default, the filter is 
set to "1=1". With this wide filter, if "Get updated events" was enabled, and Seasonality rules fired, this could lead to an infinite loop. i.e.Seasonality Rules updating
 events which in turn get read by the reader and fire the Seasonality Rules again. 
The solution is for the Event Mapping Filter to be set, in such a way, as to avoid already processed events. i.e. if the Seasonality rules are setting the
Service field to "something" then the Event Mapping Filter could be set to restrict these.

- NOI: Impact Event Isolation and Correlation page does not load if non-default cluster name is used (such as NCICLUSTER_Z )
To resolve this issue, perform the following actions:
- stop the Impact GUI server $IMPACT_HOME/bin/stopGUIServer.sh
- copy or rename the file with the correct cluster name. For example:
cp $IMPACT_HOME/opview/displays/NCICLUSTER-EIC_configure.html 
    $IMPACT_HOME/opview/displays/NCICLUSTER_Z-EIC_configure.html
- restart the Impact GUI server $IMPACT_HOME/bin/startGUIServer.sh
- go to the Event Isolation and Correlation page and confirm the page is displayed without the errors.

- NOI 1.5: The Event Analytics Configuration wizard reports an Unexpected Token error when the Impact GUI server under the Turkish locale 
Symptom: When loading the Event Analytics configuration page, an"Unexpected token: E" error is reported. Configuration cannot continue.
Root Cause:When the Impact GUI server is running under the Turkish locale, the GUI server is unable to find the contents of the uiproviderconfig directory.
Resolution: Switch to a different locale and restart the Impact GUI server

- Customization made to web.xml is overwritten
Symptom: Any customization made to the web.xml file of a .war file (such as opview.war and netcool.war)  may be overwritten during the upgrade process.
Resolution: Please check the web.xml file after completing the upgrade and reapply the customization. You can find the old customization in the following directory. 
Merge the customization, as appropriate:
<backup>/install/gui_backup/<prior-fp name>/wlp/usr/servers/ImpactUI/apps/ImpactUI.ear

- On Test environments, where more than on instance of Impact is installed (under the same user ID), Installation Manager may suppress the pop-up 
message "insufficient space for back-up directory" when performing the preliminary system checks (at Fix Pack update).
Resolution: A minimum of 900MB of space is required for updates. If it is really to have more than one instance of Impact on the environment, each instance should 
be installed under different user IDs and under under different directories.