IBM Support

QRadar: How to clear the Tomcat cache

How To


Summary

In some instances, the Apache Tomcat server's cache needs to be cleared for the QRadar® environment to function correctly. For example, IBM QRadar support might suggest an administrator clears the cache if the graphical user interface is slow or specific components of the user interface does not load as expected. This article provides the steps required to clear the Tomcat cache.

Steps

Before you begin:
  • Before you attempt to clear the Tomcat cache check if the issue is limited to certain users. If it is, have them attempt to access the graphical user interface by using their browser's incognito mode or a private tab. If that method resolves the issue, have the users clear their browser caches and attempt to access the user interface again.
  • Administrators with strict outage policies are advised to complete this procedure during a scheduled maintenance window for their organization.
  • Restarting Tomcat ends all active user sessions and logs out all users. When the Tomcat service is stopped or restarting, the QRadar user interface is not available.
  • Performance or user interface issues are not necessarily related to the Tomcat cache. If IBM QRadar support did not suggest clearing the cache, check with them for a more in-depth analysis before you complete the procedure in this article.

Procedure:
  1. Use SSH into the QRadar Console as root user.
  2. To create a backup directory for files, type the following command:
    mkdir /store/ibm_support
  3. Type the following command to stop the Tomcat service:
    systemctl stop tomcat
  4. To backup of the /opt/tomcat/work/Catalina/localhost directory, type:
    cp -pr /opt/tomcat/work/Catalina/localhost/console/org/apache/jsp  /store/ibm_support/
  5. To clear cached files from the /opt/tomcat/work/Catalina/localhost/console directory, type:
    rm -rfv /opt/tomcat/work/Catalina/localhost/console/org/apache/jsp
  6. Type the following command to start the Tomcat service:
    systemctl start tomcat

Results:
After services start, the Tomcat cached files are cleared and cache related issues are resolved. If you continue to experience problems with the QRadar user interface, contact QRadar Support for assistance.

Document Location

Worldwide

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Version(s)"}]

Document Information

Modified date:
26 October 2022

UID

ibm16348546