Description

After an upgrade to 7.5.0 UP12 version, you are not able to view the protocol parameters for any of the log sources in the log source app.

Symptoms

The protocol parameters are not present when viewing the same in the log source app.

Solution

Most protocols are installed whether they are being used or not. Post the upgrade to 7.5.0 UP12 version, it seems that the configurable value is set to false if the the protocol is not installed.

In order to resolve this issue, we can run the below psql command to fix the issue as a workaround (Once a full deploy is performed, the changes will be reverted). 

psql -U qradar -c "update sensorprotocol SET configurable = true WHERE id = 0;"

 

The permanent fix for this problem is to install the tcpsyslog protocol on the console using the below steps.

 

  • Download the tar file from here
  • As the root user on Console, please use yum to install the protocol
          cd /tmp
          tar -xzvf protocol-tcpsyslog.tar.gz
          yum -y install PROTOCOL-TCPSyslog-7.5-20250515104226.noarch.rpm
 
  • Once the installation is successful, please perform a Full Deploy from the WebUI --> Admin and post the deploy, restart the event collection service. 

After performing the above steps, the protocol parameters will be visible in the log source app in the WebUI.

 

Modification History

2025-09-03 : Article Created