QRadar Dev Application Will not Install “Failed parsing JSON from inspect”

Like a few other questions here I’m unable to figure out why my App installation fails during development testing (Running `qradar_app_creator deploy …`)

The only feedback I can find anywhere in QRadar and using the [Knowledge Center’s troubleshooting guide][1]
is in `/var/log/qradar.error`:

> Jun 28 11:16:19 ::ffff:x.x.x.x
> [tomcat] [pool-7-thread-2]
> com.q1labs.uiframeworks.application.api.task.CreateApplicationTask:
> [ERR OR] [NOT:0000003000][x.x.x.x/- -]
> [-/- -]Error registering application
> asynch method: Failed parsing JSON
> from inspect Jun 28 11:16:19
> ::ffff:x.x.x.x [tomcat]
> [pool-7-thread-2]
> com.q1labs.uiframeworks.util.DockerServiceLayer$DockerServiceException:
> Failed parsing JSON from inspect Jun
> 28 11:16:19 ::ffff:x.x.x.x [tomcat]
> [pool-7-thread-2] at
> com.q1labs.uiframeworks.util.DockerServiceLayer.getMappedPort(Dock
> erServiceLayer.java:462) Jun 28
> 11:16:19 ::ffff:x.x.x.x [tomcat]
> [pool-7-thread-2] at
> com.q1labs.uiframeworks.application.api.task.CreateApplicationTask
> .installApplicationAsync(CreateApplicationTask.java:164)
> Jun 28 11:16:19 ::ffff:x.x.x.x
> [tomcat] [pool-7-thread-2] at
> com.q1labs.uiframeworks.application.api.task.CreateApplicationTask
> .run(CreateApplicationTask.java:48)
> Jun 28 11:16:19 ::ffff:x.x.x.x
> [tomcat] [pool-7-thread-2] at
> java.util.concurrent.Executors$RunnableAdapter.call(Executors.java
> :483) Jun 28 11:16:19 ::ffff:x.x.x.x
> [tomcat] [pool-7-thread-2] at
> java.util.concurrent.FutureTask.run(FutureTask.java:274)
> Jun 28 11:16:19 ::ffff:x.x.x.x
> [tomcat] [pool-7-thread-2] at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecut
> or.java:1157) Jun 28 11:16:19
> ::ffff:x.x.x.x [tomcat]
> [pool-7-thread-2] at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecu
> tor.java:627) Jun 28 11:16:19
> ::ffff:x.x.x.x [tomcat]
> [pool-7-thread-2] at
> java.lang.Thread.run(Thread.java:798)

However when I run `docker inspect` on the image, and the base-store, and centos66 images I don’t see any obvious issues with the JSON or anything that seems obviously incorrect.

The flask application itself will run perfectly fine outside of QRadar with the run.py, and I’ve made no modifications to any generated file created with `qradar_app_create create` except views and the manifest. But this manifest is identical except version to a previous manifest on a functioning app.

Any advice on where to look next or what other steps I can do to troubleshoot would be greatly appreciated.

[1]: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.8/com.ibm.appfw.doc/c_appframework_troubleshoot.html

Related:

Leave a Reply