This article describes how to verify that the ​X-Force server database updates are current by using the log file.

If you have a proxy configured in your network, administrators will need to update httpd as per KB31626 - [JSA] X-Force feeds not updated with proxy enabled [juniper.net] ; otherwise, JSA will not receive new feeds from the X-Force server.

To verify that the X-Force server is receiving daily updates to the database, manually check the dca log entries against the information provided in Versions Info .

When confirming the latest database versions in the link, check for the following:

SDK (Web) = url_database

SDK (IP Reputation) = ipr_database

SDK (Web Application Control) = wac_database

After the database update, you will see the following within dca_info.log .

Note: For JSA 2014 [juniper.net].6 and later, the log is located in  /var/log/dca/dca_info.log .

[root@qradar dca]# grep "url_database, version" dca_info.log | tail -1
45273 2017-03-15 14:45:52.979 N UpdateModule url_database, version = 6.00409691

[root@qradar dca]# grep "ipr_database, version" dca_info.log | tail -1
45273 2017-03-15 14:45:54.765 N UpdateModule ipr_database, version = 6.00611939

[root@qradar dca]# grep "wac_database, version" dca_info.log | tail -1
45273 2017-03-15 14:45:54.765 N UpdateModule dcafilterdb, version = 6.00611940

Note: These values change as often as every 5 minutes, so your system may not have updated to the posted values before they update again.