C1000-026 · Question #26
When an administrator attempts to edit a log source after upgrading QRadar, a Device Support Module (DSM), a protocol, or Vulnerability Information Services (VIS) components, the following error…
The correct answer is D. systemctl start tomcat F. Clear browser cache. After upgrading DSM, protocol, or VIS components in QRadar, the web application server (Tomcat) must be started/restarted to load the newly updated component metadata and plugin files - without this, the UI cannot properly render or interact with the upgraded components…
Question
When an administrator attempts to edit a log source after upgrading QRadar, a Device Support Module (DSM), a protocol, or Vulnerability Information Services (VIS) components, the following error message appears. An error has occurred. Refresh your browser (press F5) and attempt the action again. If the problem persists, please contact customer support for assistance. What action should the administrator take to troubleshoot this issue? (Choose two.)
Options
- Asystemctl restart snmpd
- Bsystemctl restart iptables
- Csystemctl restart ecs-ep
- Dsystemctl start tomcat
- Esystemctl restart httpd
- FClear browser cache
How the community answered
(19 responses)- A5% (1)
- D84% (16)
- E11% (2)
Explanation
After upgrading DSM, protocol, or VIS components in QRadar, the web application server (Tomcat) must be started/restarted to load the newly updated component metadata and plugin files - without this, the UI cannot properly render or interact with the upgraded components, producing that generic error. Clearing the browser cache (F) removes stale JavaScript and page data from before the upgrade, which can cause UI conflicts even after the server is running correctly.
The distractors target unrelated services: snmpd (A) handles SNMP trap collection, iptables (B) manages firewall rules, ecs-ep (C) is the Event Collection System processor (handles event parsing, not the web UI), and httpd (E) is the Apache web server layer - while it may proxy traffic, restarting it alone won't reload the component definitions that Tomcat manages.
Memory tip: The error message itself hints at both answers - "Refresh your browser" points to F (browser cache), and the phrase "If the problem persists" points to a deeper server fix: D (Tomcat), the engine that powers QRadar's web interface. When in doubt after an upgrade, think "Browser first, Tomcat second."
Topics
Community Discussion
No community discussion yet for this question.