IBM Support

QRadar: What to check if the "Update were installed" for Auto Update does not show a date

Troubleshooting


Problem

The Update were installed field in Auto Update menu does not display a date:
image-20231227140743-1

Resolving The Problem

This behavior could be caused by multiple reasons, check the following points to discard any issue: 
  • Test the connection, run the following command to confirm the connection to the Auto Update server is OK:
    curl -kv https://auto-update.qradar.ibmcloud.com/
    Output example of a successful connection:
    image-20231227142324-2
  • Reset all AutoUpdates counters including Daily, Weekly, Autoupdate and Patches, run the following command to reset the counters and also to try to get updates at the same time from the Auto Update server.

    Command output example, though the counters are cleared immediately, the attempt to get update will take longer and it will happens after the command shows an output:
    Setting lastdau to 0
    Setting lastpatch to 0
    Setting lastau to 0
    Setting runnow to 1
    Autoupdate will start at the starting of the next minute
  • Make sure that the Auto Update patch is installed on your console, follow the steps on the following link to apply it:
    QRadar: Auto Update Proxy Issues 500 SSL NEGOTIATION FAILED
  • Run manually the Auto Update by going to QRadar, then select Admin and click the Auto Update icon, click the Get New Updates button. After you press this button, you need to wait a couple hours before the Auto Update is complete:
    image-20231227144023-3
  • To confirm if the Auto Update was installed, go to the Admin tab and click the Auto Update icon, then go to the View Log section and there you can see the last time an update was installed:
    image-20231227150637-4

    Keep in mind that usually the developers release update every week, but sometimes they can release more than one update in the same week and also have weeks without an update:

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Document Information

Modified date:
27 December 2023

UID

ibm17087844