IBM Support

QRadar: Bad data in resolv.conf causes a Microservices Infrastructure failure of the initial configuration of qchange_netsetup

Troubleshooting


Problem

A faulty configuration in /etc/resolv.conf causes Microservice Infrastructure to error resulting in a failure of the configuration of the qchange_netsetup script.

Symptom

During initial configuration you may see errors similar to this:
[microservices-infrastructure-install] Attempt X to install Microservice Infrastructure
[microservices-infrastructure-install] Microservice Infrastructure failed with return code 1
...
[microservices-infrastructure-install] After 10 failed attempts to execute the NodeInstaller, the NodeInstaller has failed to install the Microservice Infrastructure
[microservices-infrastructure-install] Error executing com.ibm.si.configservices.node.impl.NodeInstaller for the Microservice Infrastructure install
ERROR: Failed to install micro-services infrastructure components. (1)
ERROR: Failed. Exit code: 255. Case 1.
ERROR:
System setup failed.  Please logout/login on the console terminal to reconfigure system.
The following errors appear in qradar_netsetup.log:
Feb 11 14:53:26 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [INFO] ...
Feb 11 14:53:26 qradar_netsetup.py[21224]: ibm_command_utils run_and_log [INFO] systemctl restart network
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR] Exceptions:
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR] Traceback (most recent call last):
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]   File "/opt/qradar/bin/qradar_netsetup.py", line 3874, in main
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]     qradarNetsetup.doJob()
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]   File "/opt/qradar/bin/qradar_netsetup.py", line 885, in doJob
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]     self.installQradar()
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]   File "/opt/qradar/bin/qradar_netsetup.py", line 1793, in installQradar
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]     % (result))
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]   File "/opt/qradar/lib/python/ibm_logging.py", line 80, in error
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]     sysExit(255)
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]   File "/opt/qradar/lib/python/ibm_logging.py", line 46, in sysExit
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR]     raise Exception(message)
Feb 11 14:53:40 qradar_netsetup.py[21224]: qradar_netsetup finalBlock [ERROR] Exception
Feb 11 14:53:40 qradar_netsetup.py[21224]: ibm_logging error [ERROR] Failed. Exit code: 255. Case 1.
Feb 11 14:53:40 qradar_netsetup.py[21224]: ibm_logging error [ERROR]

Cause

When you configure your DNS networking configuration, the file /etc/resolv.conf is created by /etc/resolv.conf.masq. Sometimes the resolv.conf file is not correctly configured by resolv.conf.masq, which causes Microservices Infrastructure to fail to install properly.

Resolving The Problem

Before you start
Check the DNS information is configured correctly in the /etc/resolv.conf file.
The following is an example of a properly configured file:
 nameserver 127.0.0.1
 search localdomain
The following is an example of an improperly configured file that must be corrected:
nameserver 127.0.0.1search localdomain
In the improper file, notice the missing new line.
Procedure
This procedure fixes an improper resolve.conf file.
  1. Open /etc/resolv.conf in a text editor, such as vi.
    vi /etc/resolv.conf
  2. Remove all entries other than 127.0.0.1 and ensure there is a carriage return between the two lines within this file, such in the example from the Before you start section.
  3. Restart the dnsmasq service by using the command:
    systemctl restart dnsmasq
  4. Restart the appliance to reinitiate the initial install configuration.
Result
The configuration file is corrected and the Microservices Infrastructure installs and configure successfully.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Component":"Networking","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.0;7.3.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
17 June 2022

UID

ibm10871654