On initial configuration of QRadar subscription with TLS, the following is displayed as the "Last Event Response" in the QRadar subscription details:
[statuscode = BadRequest, responseContent = "Exception of type 'System.Net.Http.HttpRequestException' was thrown. - This can be caused by providing a URL/host or port that is invalid/unreachable."]
The following is logged in the Coordinator log:
2019-07-25 10:06:03.066 [4][ERROR][Quest.ChangeAuditor.WebServices.EventForwarderController+<Receive>d__8.MoveNext(0)] Exception of type 'System.Net.Http.HttpRequestException' was thrown. - This can be caused by providing a URL/host or port that is invalid/unreachable.
2019-07-25 10:06:03.082 [50][WARN][Quest.ChangeAuditor.WebServices.ManagedEventWebhookSubscription.SendEvents(0)] Failed to send event notification to 10127c87-3075-4af8-bccf-2d6c0c3fe914 https://127.0.0.1:9000/api/EventForwarder/Receive?uniqueId=3c004be4-e1c0-4088-bdb6-4a6baaeab02b. Response: { statusCode = BadRequest, responseContent = "Exception of type 'System.Net.Http.HttpRequestException' was thrown. - This can be caused by providing a URL/host or port that is invalid/unreachable." }, retry in 300 sec.
There is a failure with TLS communication in QRadar
On the Admin tab in QRadar, select "Advanced | Deploy Full Configuration" or select "Advanced | Restart Web Server"
