Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hello, IA is being tested by most of our customers. As everybody knows all SaaS products come with a number of free Qlik Answers questions: 25 for Starter, 200 for SaaS user based or Standard and 1.000 for Premium and Enterprise. This year Qlik changed the rule for overage. Only Capacity has overage enabled. All other features come with overage disabled, including Answers.
We came across several customer using beyound their contracted limits. So we have two questions: 1 - Who and how can we flag the tenant to disable Answers overage, 2 - Are we going to receive invoices for these overages?
Thank you
I am trying to build a URL so i can link from a Cataloging app that we are building directly to an Apps lineage sheet. A sample image of what i am trying to link to is attached. But so far i have been unsucessful in building a working URL. For example, when i click on Tools-->Lineage the URL looks like this:
But i don't know what this number is in the middle. The one that starts with 876c4... It's not the app id and it's not a number i can find in any of the App, Lineage or Item API's or from App/Item information in an Automation. Without it, it doesn't appear i can open that sheet.
Has anyone linked to this before? is it even possible?
Thanks
Our infrastructure security scanner flagged our Qlik Sense servers as potentially vulnerable because of the bundled Node.js 24.18.1 runtime. Following the October 21, 2026 Node.js security release, I tested updating that binary independently of a Qlik patch.
A scanner finding against a runtime version does not establish that the vulnerabilities are exploitable through Qlik Sense. Product-specific impact still needs confirmation from Qlik.
The update from Node.js 24.18.1 to 24.22.1 passed testing in our Qlik Sense Enterprise on Windows May 2026 Patch 7 environment. This is one environment's test result, not a compatibility guarantee.
This experimental method is not validated by Qlik. Qlik's documented approach is to update the bundled runtime through a Qlik Sense upgrade. This post shares a technical test, not an official remediation recommendation. If evaluating it, use development first, a maintenance window and a recoverable full backup.
Check the bundled version
& "$env:ProgramFiles\Qlik\Sense\ServiceDispatcher\Node\node.exe" --version
The full path checks Qlik's runtime rather than another Node.js installation on the PATH.
Run the attached scripts
.\01_Backup_Node.ps1
Continue only after BACKUP VERIFIED:
.\02_Update_Node.ps1
Leave the Service Dispatcher running before starting the update: the script handles stopping and restarting it. Execution is local to each machine; relative paths are resolved against the configuration folder.
Validate and roll back
Check Hub, QMC, application access, exports, reloads, usual connectors and Qlik logs. These are suggested checks, not a claim that all were covered in our test.
To roll back, set RestoreBackupDirectory to the exact original backup folder, then run:
.\03_Restore_Node.ps1
The scripts target the main Service Dispatcher runtime on Node.js 24 only. They do not update EAPowerTools, Package Cache or npm dependencies. A binary backup is not a full site backup, and automatic rollback is not guaranteed. Recheck the installed version after subsequent Qlik maintenance.
Sources: Node.js security bulletin, October 21, 2026; Node.js 24.22.1 release notes, October 21, 2026; Qlik Support guidance, updated August 14, 2024.
From https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497
Node.js shipped a security update on Wednesday for a flaw in how it decompresses Brotli data, a bug people are already calling Node2Shell (CVE-2026-111497). If an attacker can get a malicious payload in front of your app, the flaw can crash the process, leak part of its memory, or potentially let them run their own code.
Who is affected: anyone running Node.js or Bun whose app decompresses Brotli data that an attacker could control.
Ok, so Qlik Sense Enterprise on Windows runs on Node.js 24.14.1.
I have the following questions:
1. Does the specific implementation of a vulnerable Node.js version in Qlik Sense Enterprise on Windows implicate a threat to installations of Qlik Sense?
2. Are there any migitating actions that can be undertaken by administrators to continue operating safely until Qlik Sense/Node.js is patched?
3. Is there a patch coming? If so, when is this expected to be made available?
Hi,
I’m trying to use Qlik Cloud Data Integration with a Replication project.
I have:
- Qlik Cloud license with 25 GB capacity
- Talend license valid for 1 year
- all available admin permissions assigned to my user
- a verified Microsoft Dynamics 365 Business Central connection
The problem is that in the Replication project, under Create new, I only see Connection.
I do not see the Replicate data option shown in Qlik documentation/videos:
Is this option dependent on a specific Qlik Talend Cloud license or entitlement?
Hi,
I'm using TOS V7.3.1
After upgrading JRE from amazon-corretto 8.462.08.1 to amazon-corretto 8.512.09.1 on execution server, the excel components tFileOuputExcel and TFileInputExcel doesn't work anymore.
Below the message :
Exception in thread "main" java.lang.UnsatisfiedLinkError: no freetype in java.library.path
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1860)
at java.lang.Runtime.loadLibrary0(Runtime.java:843)
at java.lang.System.loadLibrary(System.java:1136)
at sun.font.FontManagerNativeLibrary$1.run(FontManagerNativeLibrary.java:59)
at java.security.AccessController.doPrivileged(Native Method)
at sun.font.FontManagerNativeLibrary.<clinit>(FontManagerNativeLibrary.java:32)
at sun.font.SunFontManager$1.run(SunFontManager.java:346)
at java.security.AccessController.doPrivileged(Native Method)
at sun.font.SunFontManager.<clinit>(SunFontManager.java:342)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:348)
at sun.font.FontManagerFactory$1.run(FontManagerFactory.java:82)
at java.security.AccessController.doPrivileged(Native Method)
at sun.font.FontManagerFactory.getInstance(FontManagerFactory.java:74)
at java.awt.Font.getFont2D(Font.java:491)
at java.awt.Font.canDisplayUpTo(Font.java:2056)
at java.awt.font.TextLayout.singleFont(TextLayout.java:470)
at java.awt.font.TextLayout.<init>(TextLayout.java:531)
at org.apache.poi.ss.util.SheetUtil.getDefaultCharWidth(SheetUtil.java:273)
at org.apache.poi.xssf.streaming.AutoSizeColumnTracker.<init>(AutoSizeColumnTracker.java:117)
at org.apache.poi.xssf.streaming.SXSSFSheet.<init>(SXSSFSheet.java:82)
at org.apache.poi.xssf.streaming.SXSSFWorkbook.createAndRegisterSXSSFSheet(SXSSFWorkbook.java:674)
at org.apache.poi.xssf.streaming.SXSSFWorkbook.createSheet(SXSSFWorkbook.java:695)
at org.apache.poi.xssf.streaming.SXSSFWorkbook.createSheet(SXSSFWorkbook.java:87)
at org.talend.ExcelTool.prepareXlsxFile(ExcelTool.java:130)
at bnppf.bnppf_abba_t9_t10_reports_0_1.Bnppf_Abba_T9_T10_Reports.tDBInput_1Process(Bnppf_Abba_T9_T10_Reports.java:4767)
at bnppf.bnppf_abba_t9_t10_reports_0_1.Bnppf_Abba_T9_T10_Reports.tWarn_2Process(Bnppf_Abba_T9_T10_Reports.java:4330)
at bnppf.bnppf_abba_t9_t10_reports_0_1.Bnppf_Abba_T9_T10_Reports.tWarn_1Process(Bnppf_Abba_T9_T10_Reports.java:4118)
at bnppf.bnppf_abba_t9_t10_reports_0_1.Bnppf_Abba_T9_T10_Reports.runJobInTOS(Bnppf_Abba_T9_T10_Reports.java:8828)
at bnppf.bnppf_abba_t9_t10_reports_0_1.Bnppf_Abba_T9_T10_Reports.main(Bnppf_Abba_T9_T10_Reports.java:8617)
But it works when I launch the jobs from Open Studio in my laptop.
Any suggestion please ?
Many thanks
Hello Community,
I’m backing up Qlik apps without data to GitHub and restoring them through Qlik Cloud Automation.
The Base64 Legacy Block flow works for small files (under 1 MB), but:
The same Call URL method performed through Postman, QVF downloaded and imports manually successfully.
How can I pass a GitHub download into native Import App, and commit native Export App output without legacy Base64 blocks?
A working example would help.
I have uploaded a Restore Qlik Cloud Automation for the reference.
Thanks
See e.g. https://www.heise.de/en/news/eMudhra-incident-compromises-eight-CA-certificates-11494689.html
Qlik Sense seems to use node.js and go. Thus, I expect qlik needs to be patched, right?
Please let us know which patches are necessary and their ETA if not yet released.
Hi all,
we are experiencing an issue with a Qlik Replicate Full Load from MariaDB to SQL Server.
The source table is very large, containing approximately 7.6 billion rows.
The load fails while Replicate tries to create the primary key/unique index on the target table:
Stream component 'st_1_TargetEndpoint' terminated
Stream component failed at subtask 1, component st_1_TargetEndpoint
Error executing data handler
Endpoint is disconnected
Execute create Primary Key/Unique Index failed, statement:
CREATE UNIQUE INDEX [LARGE_DATA_TABLE_PK]
ON [TARGET_SCHEMA].[LARGE_DATA_TABLE]
(
[KEY_COLUMN_1],
[TIMESTAMP_COLUMN],
[SEQUENCE_COLUMN]
)
RetCode: SQL_ERROR
SqlState: HYT00
NativeError: 0
Message: [Microsoft][ODBC Driver 18 for SQL Server]
Query timeout expired
Failed (retcode -1) to execute statement:
CREATE UNIQUE INDEX [LARGE_DATA_TABLE_PK]
ON [TARGET_SCHEMA].[LARGE_DATA_TABLE]
(
[KEY_COLUMN_1],
[TIMESTAMP_COLUMN],
[SEQUENCE_COLUMN]
)The Full Load is segmented using KEY_CULUMN_1. We also checked the source-side performance and investigated the SQL Server load and connection behavior.
The actual failure seems to occur when Replicate creates the unique index after loading the table.
We are currently looking into the timeout settings in Replicate/ODBC.
Has anyone experienced this behavior with very large tables before?
In particular:
Any hints or recommended settings would be appreciated.
Thanks in advance!
Good Morning all,
this one might be better suited in the API section, but i dont know....I am trying to get the IDs of all QVDs in a given (subfolder) of a space from within my LOAD script. I tried setting up a REST connection (worked) and also giot to see a few QVDs, but these seemed to be only QVDs from my personal folder...Can anyone help
If this will not work: My ultimate goal is to delete QVDs (using an automation) in a given space based on a list of QVD names that need to be deleted. (I tried that as well, but failed as i need the file IDs for the files i want to delete...which i dont know how to get)
Thanks for any kind of support!
Get up to speed with the newest features and improvements. Our product recap has the full rundown!
See how agentic AI is changing business intelligence and analytics teams, and why trusted data and shared context matter most.
Here’s your agentic AI readiness check. (Got Qlik? You're closer than you think.)
Built for the builders: Modern data engineering is AI powered — and engineer led.
The pilot-to-production gap is real. From fragmented data to governance gaps Qlik and AWS break down what’s holding your enterprise AI back — and how to solve them.
Your journey awaits! Join us by Logging in and let the adventure begin.