This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions
Announcement Banner

Users are unable to open Netwitness Support Cases via email. Please open support cases via portal or by phone

View Details
  • NetWitness Community
  • Discussions
  • RSA Security Analytics - Incident Management Services Issue
  • Options
    • Subscribe to RSS Feed
    • Mark Topic as New
    • Mark Topic as Read
    • Float this Topic for Current User
    • Bookmark
    • Subscribe
    • Mute
    • Printer Friendly Page

RSA Security Analytics - Incident Management Services Issue

AndreaSaldamarc
AndreaSaldamarc Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2016-09-12 10:10 AM

Dear Support,

We are facing a problem during the configuration and integration between RSA Security Analytics Incident Management and RSA Archer with SecOps 1.3.

These are our appliances names and IPs:

 

MLNSASRV

SA SERVER

IP 10.192.72.166

MLNSAESA

ESA SERVER      

IP 10.192.72.168

 

Actually we have this error while accessing the Incident Management->Configure page from the SA GUI:

Failed to authenticate to database [im], username = [rsaimusr], password = [********]

 

In the SA IM Log we have these errors (see also the attached file)

Failed to authenticate to database [im], username = [rsaimusr], password = [********]

Could not connect to database 10.192.72.168:27017/im

 

On the SA IM Service Information (View->System) I have this values:

 

Hostname

mlnsasrv

Home Directory

/opt/rsa/im      

 

The /opt/rsa/im directory is present on the SA Server but not on the ESA Server.

 

If I test the port indicated in the SA IM Config page is working as reported below

[root@mlnsasrv ~]# curl http://10.192.72.168:27017

You are trying to access MongoDB on the native driver port. For http diagnostic access, add 1000 to the port number

[root@mlnsasrv ~]#

 

Thanks so much for your collaboration.

Kind regards

Andrea Saldamarco

  • Community Thread
  • Discussion
  • Forum Thread
  • NetWitness
  • NW
  • NWP
  • RSA NetWitness
  • RSA NetWitness Platform
  • secops 1.3
  • security analysis
  • security_incident_management
  • SIEM
0 Likes
Share
Reply
  • All forum topics
  • Previous Topic
  • Next Topic
2 REPLIES 2

BrianKeenan
BrianKeenan Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2016-09-12 01:29 PM

Did you create this rsaimusr otherwise I believe the default user should be just 'im'

4 Likes
Share
Reply

AndreaSaldamarc
AndreaSaldamarc Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2016-09-13 10:07 AM

I solved using as username&password "im".

 

Thanks so much for your collaboration.

Kind regards

Andrea Saldamarco

1 Like
Share
Reply
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.