IBM Support

QRadar: Troubleshooting "Internal Server Error" when trying to save a network group change.

Troubleshooting


Problem

In the browser, after making a change or addition to Remote Networks and Services, when the user tries to save the change, they receive error: "Internal Server Error"

Diagnosing The Problem

To find the cause of the issue, search the /var/log/qradar.log for "remote_networks" and pull out the error stack.
For example:
less /var/log/qradar.log | grep -i remote_networks

Resolving The Problem

1.  If the trace exception contains this error: "com.q1labs.restapi_annotations.content.exceptions.endpointExceptions.ServerProcessingException: Internal server error. Failed to update the staged configuration file."      then the server cannot save the change because there is already a change pending.  In the admin tab, deploy any changes that are waiting and then save the new change.
2. If the trace exception contains this error:
"java.io.IOException: File '/store/configservices/staging/globalconfig/remotenet.conf' cannot be written to"  then the problem is likely caused by a permissions issue.
To check the permissions, run command:
ls -lah /store/configservices/staging/globalconfig/remotenet.conf
The result may look something like this:
-rw-rw-r-- 1 root root 8011241 Oct  9 19:26 /store/configservices/staging/globalconfig/remotenet.conf
The ownership set to root root like in the example is incorrect.  The ownership should be set to nobody nobody.  To fix the problem, run this command:
chown nobody:nobody /store/configservices/staging/globalconfig/remotenet.conf

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSV4BL","label":"IBM QRadar"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"TS017500357","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
09 October 2024

UID

ibm17172758