How to trouble shoot QRadar VA Scanner scheduled job that does not complete
I have VA Scanner for BigFix for which I have created scheduled jobs. The scanning scheduled jobs used to run fine. The last time they ran were on Aug 24 2017 and the status was Success. Since Aug 24, they have not run. I reboot the QRadar server yesterday. After the reboot, the BigFix scan scheduled jobs started, but the status remain at 50% complete. They are stuck at 50% complete since yesterday afternoon.
How do I trouble shoot this problem? What logs do I look? QRadar is at v7.2.8 and OS is RHEL v6
Thank
I've had issue before with importing scanner results results into QRadar. I've found that /var/log/qradar.log has information like listed below that can help. My problem was the password was wrong.
Aug 31 03:35:00 ::ffff:10.x.x.x [vis] [Schedule Manager] com.q1labs.vis.ScheduleManager: [INFO] [NOT:0000006000][10.x.x.x/- -] [-/- -]Received scan update response from scanner with config id 154 and request id 401 - progress: 11% status: Active