How To
Summary
In some instances, the Apache Tomcat server's cache needs to be cleared for the QRadar® environment to function correctly. For example, IBM QRadar support might suggest an administrator clears the cache if the graphical user interface is slow or specific components of the user interface does not load as expected. This article provides the steps required to clear the Tomcat cache.
Steps
Before you begin:
- Before you attempt to clear the Tomcat cache check if the issue is limited to certain users. If it is, have them attempt to access the graphical user interface by using their browser's incognito mode or a private tab. If that method resolves the issue, have the users clear their browser caches and attempt to access the user interface again.
- Administrators with strict outage policies are advised to complete this procedure during a scheduled maintenance window for their organization.
- Restarting Tomcat ends all active user sessions and logs out all users. When the Tomcat service is stopped or restarting, the QRadar user interface is not available.
- Performance or user interface issues are not necessarily related to the Tomcat cache. If IBM QRadar support did not suggest clearing the cache, check with them for a more in-depth analysis before you complete the procedure in this article.
Procedure:
- Use SSH into the QRadar Console as root user.
- To create a backup directory for files, type the following command:
mkdir /store/ibm_support
- Type the following command to stop the Tomcat service:
systemctl stop tomcat
- To backup of the /opt/tomcat/work/Catalina/localhost directory, type:
cp -pr /opt/tomcat/work/Catalina/localhost/console/org/apache/jsp /store/ibm_support/
- To clear cached files from the /opt/tomcat/work/Catalina/localhost/console directory, type:
rm -rfv /opt/tomcat/work/Catalina/localhost/console/org/apache/jsp
- Type the following command to start the Tomcat service:
systemctl start tomcat
Results:
After services start, the Tomcat cached files are cleared and cache related issues are resolved. If you continue to experience problems with the QRadar user interface, contact QRadar Support for assistance.
Document Location
Worldwide
[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Version(s)"}]
Was this topic helpful?
Document Information
Modified date:
26 October 2022
UID
ibm16348546