Running the log collection script (/opt/qradar/support/get_logs.sh) hangs after DrQ. There are no errors and the next commands in the script can be successfully run on the box. It is also hard to break out of the script often having to send multiple control breaks or kill the pid.

[root@<hostname> ~]# /opt/qradar/support/get_logs.sh --------------------------------------------------------------------------------------

get_logs.sh v6.4 - <hostname>--------------------------------------------------------------------------------------

INFO: Gathering install information...

INFO: Collecting DrQ output...

^C

The log collection script (get_logs.sh) does not complete.

Update the /opt/qradar/support/qni/qniFunctions.sh that is called by the get_logs.sh script to use these functions instead of the original ones:

Replace these functions at the bottom:

function ntMonitoring() {

  printf "${SPACER}%s\n" "Napatech monitoring tool:"

  /opt/napatech3/bin/monitoring > ${logLocation}/monitoring.txt

  awk '{printf "\t%s\n",$0}' ${logLocation}/monitoring.txt

}

function ntProfiling() {

  printf "${SPACER}%s\n" "Napatech profiling tool:"

  /opt/napatech3/bin/profiling > ${logLocation}/monitoring.txt

  awk '{printf "\t%s\n",$0}' ${logLocation}/profiling.txt

}

with these functions:

function ntMonitoring() {

  printf "${SPACER}%s\n" "Napatech monitoring tool:"

  tmux new-session -d -s mon "/opt/napatech3/bin/monitoring"

  sleep 4

  tmux capture-pane -t mon -pS - > ${logLocation}/monitoring.txt

  tmux kill-session -t mon

  awk '{printf "\t%s\n",$0}' ${logLocation}/monitoring.txt

}

function ntProfiling() {

  printf "${SPACER}%s\n" "Napatech profiling tool:"

  tmux new-session -d -s profiling "/opt/napatech3/bin/profiling > ${logLocation}/profiling.txt"

  sleep 1

  tmux capture-pane -t profiling -pS - > ${logLocation}/profiling.txt

  tmux kill-session -t profiling

  awk '{printf "\t%s\n",$0}' ${logLocation}/profiling.txt

}

This will be fixed in a new version of the get_logs script which will be pushed out to customers via autoupdates.