Description

This issue is encountered after 11/8/21 due to an auto update script version compatibility problem.  A new version (9.11) was released on this date requiring versions 9.9 (zero implied, 9.09) and below to update manually.
# cat AU-1647376142.log
Autoupdate initialized.
Tue Mar 15 13:29:02 2022 [DEVEL] AU schedule is set to: daily
AU Started: Runnow was set to 1
Tue Mar 15 13:29:02 2022 [DEBUG] Set autoupdate_status to 1
Tue Mar 15 13:29:02 2022 [DEBUG] Previous Value: 0
Tue Mar 15 13:29:02 2022 [DEBUG] Updating DB
Tue Mar 15 13:29:02 2022 [DEBUG] Successfully Updated DB autoupdate_status to 1
Tue Mar 15 13:29:02 2022 [INFO] Autoupdate 9.5 initialized.   <<<<< Problem version (9.05)
Tue Mar 15 13:29:02 2022 [INFO] Do we need to turn on SSL Cert

Symptoms

The auto update logging reflects the following entries:

Could not retrieve "manifest_list_512": 500 Can't connect to download.juniper.net:443
Could not download manifest list.

To resolve this, download the auto updates script and manually install it. 

Solution

Confirm the running auto updates current script version

SSH to into the Console as the root user and run:
# /opt/qradar/bin/UpdateConfs.pl -v
9.10

To resolve this issue:

  1. Download this Auto Update package to your laptop or workstation.
  2. Copy the file to a directory of the Console, such as /root, /tmp, or /storetmp.
  3. Log in to the console via SSH and navigate to the directory where you placed the file.
  4. Type the following command to extract the file:
    # gunzip -c AUProxyFP-9.11.tgz | tar zxvf -
  5. Type the following command to install the fix pack:
     # /install.sh
  6. Confirm your auto update version is updated by running the version check again:
    # /opt/qradar/bin/UpdateConfs.pl -v
    9.11
  7. From the Console, go to the Admin tab. Click the Auto Update icon, then click the 'Get New Updates' button.

Modification History

2022-08-03: Initial publication