Flashes (Alerts)
Abstract
You receive an error "Unable to perform the search operation. Please contact the Resilient administrator and report the issue" when searching within in the IBM Resilient user interface after upgrading by using the resilient-38.0.6006.run file.
Content
Steps to reproduce:
Log in to IBM Resilient and attempt to perform a search:
When searching, you receive the error, "Unable to perform the search operation. Please contact the Resilient administrator and report the issue."
You see these corresponding messages in the /usr/share/co3/logs/client.log
04:48:49.565 [http-nio-443-exec-5] ERROR [elasticsearch] com.co3.search.ElasticSearchClient - ElasticSearchQueryException - no such index 04:54:33.145 [http-nio-443-exec-6] ERROR [elasticsearch] com.co3.search.ElasticSearchClient - ElasticSearchQueryException - no such index 04:58:35.254 [http-nio-443-exec-4] ERROR [elasticsearch] com.co3.search.ElasticSearchClient - ElasticSearchQueryException - no such index Current Workaround:
Run the following commands to reindex and restart the IBM Resilient service.
Search begins working again as soon as you execute the following commands, but until the index is fully rebuilt the results might be incomplete. The amount of time it takes to rebuild the index depends on the size of your data. Data is indexed from newest to oldest so newer incidents are available in the index sooner than older ones.
sudo resutil configset -key elastic_server.init_schema -bvalue true sudo systemctl restart resilient You can tail /usr/share/co3/logs/client.log to follow the percentage completion of the indices.
16:18:01.211 [Thread-12] INFO com.co3.search.ElasticSearchReindexer - beginning population of ElasticSearch indexes... 16:18:04.453 [Thread-12] INFO com.co3.search.ElasticSearchReindexer - 100% complete 16:18:04.458 [Thread-12] INFO com.co3.search.ElasticSearchReindexer - ElasticSearch indexes have been fully populated Current Status:
Resolved.
The Engineering team have made resilient-38.0.6007.run available on IBM Fix Central. Please download this version and use it in place of the previous.
The v38 OVA is not affected.
[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSIP9Q","label":"IBM Security SOAR"},"ARM Category":[{"code":"a8m0z000000cwJlAAI","label":"Installation \/ Upgrade"}],"ARM Case Number":"TS004106078","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]
Was this topic helpful?
Document Information
Modified date:
19 April 2021
UID
ibm16322667