Troubleshooting
Problem
Enriching data in IBM Security QRadar SOAR, using the Enhanced Data Migration app, HTTP 404's are returned to the web browser.
Symptom
Clicking any of the blue hyperlinks in the data table opens a page within IBM Security QRadar XDR but the page does not load and 404 page not found is seen instead.
Enabling debug in the app shows HTTP 404 errors returned by QRadar when the app tries to call the /console/graphql endpoint. This is the Analyst Workflow endpoint.
ERROR [qradar_utils] [Thread-12] '500 Server Error: 500 for url: https://<QRADAR SERVER>/api/ariel/searches'
DEBUG [connectionpool] [Thread-24] https://<QRADAR SERVER>:443 "POST /console/graphql HTTP/1.1" 404 19
Cause
Clicking on the hyperlink text, the browser will attempt to open a page starting with https://<QRADAR SERVER>/console/ui. This is the URL of QRadar Analyst Workflow.
If an HTTP 404 is returned when the web browser redirects, it is because QRadar Analyst Workflow is not installed.
Diagnosing The Problem
In IBM Security QRadar XDR, check the Analyst Workflow application is installed.
Resolving The Problem
If Analyst Workflow is not installed, install the application to IBM Security QRadar XDR and once installed, click the hyperlinks in the incident.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z000000cwqTAAQ","label":"Integrations-\u003EQRadar function"}],"ARM Case Number":"TS008599737","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEGM63","label":"IBM Security QRadar SOAR on Cloud"},"ARM Category":[{"code":"a8m0z000000cwqTAAQ","label":"Integrations-\u003EQRadar function"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
18 September 2023
UID
ibm16561893