This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions
Announcement Banner

Scheduled Maintenance for the Case Portal during May 20-22

View Details
  • NetWitness Community
  • Discussions
  • Gracefully Shutting Down SA
  • Options
    • Subscribe to RSS Feed
    • Mark Topic as New
    • Mark Topic as Read
    • Float this Topic for Current User
    • Bookmark
    • Subscribe
    • Mute
    • Printer Friendly Page

Gracefully Shutting Down SA

Go to solution
RSAAdmin
RSAAdmin Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2015-08-24 08:13 AM

Hi everyone,

 

I was reading through the latest rounds of the KB articles that detail powering down SA devices with DACs attached. One thing I thought was interesting was that it had a step where we needed to create a backup of the fstab, comment out a few lines in the current fstab, then restore the original when the device is powered back on.

 

Does anyone know if this is still a requirement with the SA gear, or was this a holdover from the NW days?

 

thanks!

 

John

  • Community Thread
  • Discussion
  • Forum Thread
  • netwiness
  • NetWitness
  • NW
  • NWP
  • RSA NetWitness
  • RSA NetWitness Platform
  • Security
  • security_analytics
0 Likes
Share
Reply
  • All forum topics
  • Previous Topic
  • Next Topic
1 ACCEPTED SOLUTION

Accepted Solutions

Go to solution
JonathanSaxon
Employee JonathanSaxon
Employee
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2015-08-26 12:10 PM

We wrote the articles to include these steps as it allowed you to bring up the appliances without the filesystems mounting at reboot.

 

There were many instances where this was preferable, and taken as an additional precaution to allow customers to bring up the appliances with the filesystems in an unmounted state in case they wanted to do any other disk maintenance, run xfscheck, etc. when the boxes came up.

 

These step are recommended but obviously, you can shut down the appliances and restart them without completing these steps. However, adding disclaimers and notes about optional steps seemed to simply confuse the document and make it more difficult to read.

 

If you have any other questions, please let us know.

 


View solution in original post

1 Like
Share
Reply
4 REPLIES 4

Go to solution
RSAAdmin
RSAAdmin Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2015-08-26 07:05 AM

I'm not sure what version your are running, but I have successfully shutdown / started up many SA environments running 10.4.1 over the past few months and I did not need to do anything with fstab.  All I did was shutdown the appliance headunits (concentrators or decoders) and then unplug the DACs. Then for startup, I power on the DACs first before powering on the appliance headunits.  Then run appropriate health checks. That should be it.

 

Hope that helps

0 Likes
Share
Reply

Go to solution
RSAAdmin
RSAAdmin Beginner
Beginner
In response to RSAAdmin
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2015-08-26 10:56 AM

Hi,

Yeah, I had never even thought of screwing with the fstabs until I came across a KB article that had that in the instructions. Made me second guess myself

 

But I appreciate the reply and sanity check.

 

Thanks!

 

John

0 Likes
Share
Reply

Go to solution
JonathanSaxon
Employee JonathanSaxon
Employee
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2015-08-26 12:10 PM

We wrote the articles to include these steps as it allowed you to bring up the appliances without the filesystems mounting at reboot.

 

There were many instances where this was preferable, and taken as an additional precaution to allow customers to bring up the appliances with the filesystems in an unmounted state in case they wanted to do any other disk maintenance, run xfscheck, etc. when the boxes came up.

 

These step are recommended but obviously, you can shut down the appliances and restart them without completing these steps. However, adding disclaimers and notes about optional steps seemed to simply confuse the document and make it more difficult to read.

 

If you have any other questions, please let us know.

 


1 Like
Share
Reply

Go to solution
RSAAdmin
RSAAdmin Beginner
Beginner
In response to JonathanSaxon
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2015-08-26 04:15 PM

Ok, cool. I appreciate the info. It's definitely easy to get lost in a sea of KB articles.

 

Thanks!

1 Like
Share
Reply
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.