can anyone help me with this error

[dagmsolomon]

can anyone help me with this error

RSA Security Analytics
Service Unavailable
Error Description:
Security Analytics server is unable to start. Please make sure all services are running and restart the Security Analytics server.
View Error

Stack Backtrace

org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'unifiedDashboardController': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: protected com.rsa.smc.sa.core.endpoint.service.EndpointService com.rsa.smc.sa.core.web.BaseModelController.endpointService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultEndpointService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.core.appliance.service.ApplianceService com.rsa.smc.sa.core.endpoint.service.DefaultEndpointService.applianceService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultApplianceService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.service.PuppetService com.rsa.smc.sa.core.appliance.service.DefaultApplianceService.puppetService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultPuppetService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.management.provision.ApplianceProvision com.rsa.smc.sa.admin.service.DefaultPuppetService.applianceProvision; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultApplianceProvision': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.management.provision.ApplianceAddServicesState com.rsa.smc.sa.admin.management.provision.DefaultApplianceProvision.addServicesState; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'applianceAddServicesState': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.management.domain.repository.NodesRepository com.rsa.smc.sa.admin.management.provision.ApplianceAddServicesState.nodesRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'nodesRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'updateSACenteralMeta': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.esa.service.EsaCentralMetaService com.rsa.smc.sa.esa.job.UpdateSACenteralMeta.esaCentralMetaService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultEsaCentralMetaService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.esa.domain.repository.MetaTypeRepository com.rsa.smc.sa.esa.service.DefaultEsaCentralMetaService.metaTypeRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'metaTypeRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'outputActionProviderEventListener': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.esa.service.SynchronizationService com.rsa.smc.sa.esa.events.AbstractContentEventListener.synchronizationService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultSynchronizationService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.esa.domain.repository.SynchronizationRepository com.rsa.smc.sa.esa.service.DefaultSynchronizationService.synchronizationRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'synchronizationRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'metaTypeEventListener': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.esa.service.RuleService com.rsa.smc.sa.esa.events.AbstractContentEventListener.ruleService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultRuleService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.esa.service.generator.epl.EplGenerator com.rsa.smc.sa.esa.service.DefaultRuleService.eplGenerator; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'eplGenerator': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.esa.domain.repository.RuleTemplateRepository com.rsa.smc.sa.esa.service.generator.epl.EplGenerator.ruleTemplateRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'ruleTemplateRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'databaseReferenceEventListener': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.content.service.TemplateService com.rsa.smc.sa.esa.events.AbstractContentEventListener.templateService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultTemplateService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.content.domain.repository.TemplateRepository com.rsa.smc.sa.content.service.DefaultTemplateService.templateRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'templateRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'synchronizationEventListener': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.content.service.OutputActionProviderService com.rsa.smc.sa.esa.events.AbstractContentEventListener.outputActionProviderService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultOutputActionProviderService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.content.domain.repository.OutputActionProviderRepository com.rsa.smc.sa.content.service.DefaultOutputActionProviderService.outputActionProviderRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'outputActionProviderRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'rtaEndpointListener': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.esa.service.DatabaseReferenceService com.rsa.smc.sa.esa.events.RtaEndpointListener.service; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultDatabaseReferenceService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.esa.domain.repository.DatabaseReferenceRepository com.rsa.smc.sa.esa.service.DefaultDatabaseReferenceService.repository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'databaseReferenceRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'enrichmentEventListener': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.content.service.OutputActionService com.rsa.smc.sa.esa.events.AbstractContentEventListener.outputActionService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultOutputActionService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.content.domain.repository.OutputTypeRepository com.rsa.smc.sa.content.service.DefaultOutputActionService.outputTypeRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'outputTypeRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultContentInitializer': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.esa.service.OOTBContentService com.rsa.smc.sa.esa.events.DefaultContentInitializer.esaOOTBContentService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultOOTBContentService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.esa.service.EnrichmentSourceService com.rsa.smc.sa.esa.service.DefaultOOTBContentService.enrichmentSourceService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultEnrichmentSourceService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.esa.domain.repository.EnrichmentSourceRepository com.rsa.smc.sa.esa.service.DefaultEnrichmentSourceService.enrichmentSourceRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'enrichmentSourceRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'defaultEntitlementService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.core.licensing.LLSManager com.rsa.smc.sa.admin.service.entitlement.DefaultEntitlementService.llsManager; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'LLSManager': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.core.licensing.OOTBLicenseManager com.rsa.smc.sa.core.licensing.LLSManager.ootbLicenseManager; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'OOTBLicenseManager': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.service.entitlement.OOTBEntitlementService com.rsa.smc.sa.core.licensing.OOTBLicenseManager.ootbService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'OOTBEntitlementService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.domain.repository.entitlement.OOTBInfoQueryDAO com.rsa.smc.sa.admin.service.entitlement.OOTBEntitlementService.ootbInfoQueryDAO; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'OOTBInfoQueryDAOImpl': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.admin.domain.repository.entitlement.OOTBInfoRepository com.rsa.smc.sa.admin.domain.repository.entitlement.OOTBInfoQueryDAOImpl.ootbInfoRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'OOTBInfoRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'licenseComplianceEvaluator': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.service.entitlement.MeteredEntitlementService com.rsa.smc.sa.admin.service.entitlement.LicenseComplianceEvaluator.meteredEntitlementService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'meteredEntitlementService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.admin.domain.repository.entitlement.MeteredQueryDAO com.rsa.smc.sa.admin.service.entitlement.MeteredEntitlementService.meteredQueryDAO; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'meteredQueryDAOImpl': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.rsa.smc.sa.admin.domain.repository.entitlement.MeteredSpikeRepository com.rsa.smc.sa.admin.domain.repository.entitlement.MeteredQueryDAOImpl.meteredSpikeRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'meteredSpikeRepository': FactoryBean threw exception on object creation; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'endpointCleanupService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.core.licensing.LicensingService com.rsa.smc.sa.core.endpoint.service.EndpointCleanupService.licensingService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'licensingService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.service.entitlement.LicenseDeviceHistoryService com.rsa.smc.sa.core.licensing.LicensingService.historyService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'licenseDeviceHistoryService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rsa.smc.sa.admin.domain.repository.entitlement.LicenseDeviceHistoryRepository com.rsa.smc.sa.admin.service.entitlement.LicenseDeviceHistoryService.licenseDeviceHistoryRepository; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'licenseDeviceHistoryRepository': FactoryBean threw exception on object creation; nested exception is com.mongodb.MongoException: not authorized for query on sa.system.indexes
at AutowiredAnnotationBeanPostProcessor postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:298)
at AbstractAutowireCapableBeanFactory populateBean(AbstractAutowireCapableBeanFactory.java:1,148)
at AbstractAutowireCapableBeanFactory doCreateBean(AbstractAutowireCapableBeanFactory.java:519)
at AbstractAutowireCapableBeanFactory createBean(AbstractAutowireCapableBeanFactory.java:458)
at AbstractBeanFactory$1 getObject(AbstractBeanFactory.java:293)
at DefaultSingletonBeanRegistry getSingleton(DefaultSingletonBeanRegistry.java:223)
at AbstractBeanFactory doGetBean(AbstractBeanFactory.java:290)
at AbstractBeanFactory getBean(AbstractBeanFactory.java:191)
at DefaultListableBeanFactory preInstantiateSingletons(DefaultListableBeanFactory.java:636)
at AbstractApplicationContext finishBeanFactoryInitialization(AbstractApplicationContext.java:934)
at AbstractApplicationContext refresh(AbstractApplicationContext.java:479)
at ContextLoader configureAndRefreshWebApplicationContext(ContextLoader.java:410)
at ContextLoader initWebApplicationContext(ContextLoader.java:306)
at ContextLoaderListener contextInitialized(ContextLoaderListener.java:112)
at SafeModeContextListener contextInitialized(SafeModeContextListener.java:37)
at ContextHandler callContextInitialized(ContextHandler.java:788)
at ServletContextHandler callContextInitialized(ServletContextHandler.java:434)
at ContextHandler startContext(ContextHandler.java:780)
at ServletContextHandler startContext(ServletContextHandler.java:284)
at WebAppContext startContext(WebAppContext.java:1,322)
at ContextHandler doStart(ContextHandler.java:732)
at WebAppContext doStart(WebAppContext.java:490)
at AbstractLifeCycle start(AbstractLifeCycle.java:69)
at ContainerLifeCycle start(ContainerLifeCycle.java:118)
at ContainerLifeCycle addBean(ContainerLifeCycle.java:282)
at ContainerLifeCycle addBean(ContainerLifeCycle.java:214)
at ContainerLifeCycle updateBeans(ContainerLifeCycle.java:764)
at HandlerCollection setHandlers(HandlerCollection.java:89)
at ContextHandlerCollection setHandlers(ContextHandlerCollection.java:145)
at HandlerCollection addHandler(HandlerCollection.java:155)
at StandardDeployer processBinding(StandardDeployer.java:41)
at AppLifeCycle runBindings(AppLifeCycle.java:186)
at DeploymentManager requestAppGoal(DeploymentManager.java:495)
at DeploymentManager addApp(DeploymentManager.java:146)
at ScanningAppProvider fileAdded(ScanningAppProvider.java:175)
at ScanningAppProvider$1 fileAdded(ScanningAppProvider.java:64)
at Scanner reportAddition(Scanner.java:605)
at Scanner reportDifferences(Scanner.java:528)
at Scanner scan(Scanner.java:391)
at Scanner doStart(Scanner.java:313)
at AbstractLifeCycle start(AbstractLifeCycle.java:69)
at ScanningAppProvider doStart(ScanningAppProvider.java:145)
at AbstractLifeCycle start(AbstractLifeCycle.java:69)
at DeploymentManager startAppProvider(DeploymentManager.java:557)
at DeploymentManager doStart(DeploymentManager.java:232)
at AbstractLifeCycle start(AbstractLifeCycle.java:69)
at ContainerLifeCycle start(ContainerLifeCycle.java:118)
at Server start(Server.java:342)
at ContainerLifeCycle doStart(ContainerLifeCycle.java:100)
at AbstractHandler doStart(AbstractHandler.java:60)
at Server doStart(Server.java:290)
at AbstractLifeCycle start(AbstractLifeCycle.java:69)
at XmlConfiguration$1 run(XmlConfiguration.java:1,250)
at AccessController doPrivileged(AccessController.java:-2)
at XmlConfiguration main(XmlConfiguration.java:1,174)
at NativeMethodAccessorImpl invoke0(NativeMethodAccessorImpl.java:-2)
at NativeMethodAccessorImpl invoke(NativeMethodAccessorImpl.java:62)
at DelegatingMethodAccessorImpl invoke(DelegatingMethodAccessorImpl.java:43)
at Method invoke(Method.java:483)
at Main invokeMain(Main.java:509)
at Main start(Main.java:651)
at Main main(Main.java:99)

[EricaChalfin]

DAjfepZwXCLrkTis0RBl9WIFsCN8wo13MErTzT2VX1g=‌,

Since this question has to do with the https://community.rsa.com/community/products/netwitness?sr=search&searchId=b5e3c3e1-f1c1-4ee6-a650-6cd228bd7f21&searchIndex=0‌, I've moved your question there so you can get an answer.

Regards,

Erica

[DougLaing]

Have you tailed the /var/log/messages at the time you are starting?  That sometimes will give you errors, warnings or other general messages to assist the troubleshooting.

[dagmsolomon]

hi here is the tail log

GenericJMXConfConnection: Creating MBean server connection failed: java.io.IOException: Failed to retrieve RMIServer stub: javax.naming.ServiceUnavailableException

[Anonymous]

I believe that is an error associated with collectd not finding the service.  I would open 2 ssh sessions, tailing /var/log/messages in one window, and then run 'service collectd restart' in the other window.  If this doesn't resolve the issue, grab any pertinent logs and re-post them.  Also, check to see if 'puppet agent -t' runs cleanly or if it contains errors.

[matt2421]

Is this a VM or an actual hardware appliance?

If its a VM, make sure you have enough resources(memory) allocated to your SA server

If this is an appliance, stop jettysrv, start jettysrv; tail -f /var/log/messages

[dagmsolomon]

still have the essue

Jan 12 11:51:23 rsaaio collectd[14093]: GenericJMXConfConnection: Creating MBean server connection failed: java.io.IOException: Failed to retrieve RMIServer stub: javax.naming.ServiceUnavailableException

Jan 12 11:51:23 rsaaio collectd[14093]: GenericJMXConfConnection: Creating MBean server connection failed: java.io.IOException: Failed to retrieve RMIServer stub: javax.naming.ServiceUnavailableException

Jan 12 11:52:17 rsaaio collectd[14093]: ESMAggregator: Persisted 0 of 0 stats in /var/lib/netwitness/collectd/ESMAggregator

Jan 12 11:52:23 rsaaio collectd[14093]: GenericJMXConfConnection: Creating MBean server connection failed: java.io.IOException: Failed to retrieve RMIServer stub: javax.naming.ServiceUnavailableException

Jan 12 11:52:23 rsaaio collectd[14093]: GenericJMXConfConnection: Creating MBean server connection failed: java.io.IOException: Failed to retrieve RMIServer stub: javax.naming.ServiceUnavailableException

Jan 12 11:52:23 rsaaio collectd[14093]: GenericJMXConfConnection: Creating MBean server connection failed: java.io.IOException: Failed to retrieve RMIServer stub: javax.naming.ServiceUnavailableException

[JohnKisner]

Dagm,

You need to make sure all supporting services are running correctly before trying to get the jettysrv service running. As this is an All-In-One appliance it can be a little confusing which services are required. Try the following commands:

1. service rsa-sms status

2. service rsa-im status

3. service puppet status

4 service rabbitmq-server status

5 service collectd status

6. service mcollective status

7. service puppetmaster status

If you find any of these services not running then you may know why the UI isn't running. You will need to make sure each service is running as expected to get the jettysrv to start. Whichever one is dead/stopped, attempt to start and watch it's log (most are in /var/log/messages) for any error messages. If all the services start cleanly you should then be able to start jettysrv without issue.

[dagmsolomon]

hi still not working here is the log

Feb  9 14:50:03 rsaaio collectd[4266]: NgNativeReader_NwLogDecoder-FastUpdate: n                                                                                        wsdk failure: NwOpen returned 0; code 0; error: Could not find trusted session i                                                                                        d in hello response
Feb  9 14:50:03 rsaaio collectd[4266]: NgNativeReader_NwLogDecoder-FastUpdate: f                                                                                        ailed to connect to device: failed to connect to nws://admin@localhost:56002/?gr                                                                                        oup=Administrators&cert=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fcerts%2F5cf25615-3288-4a5a                                                                                        -af42-100457cda042.pem&key=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fprivate_keys%2F5cf25615                                                                                        -3288-4a5a-af42-100457cda042.pem
Feb  9 14:50:05 rsaaio collectd[4266]: NgNativeReader_NwIPDBExtractor-FastUpdate                                                                                        : nwsdk failure: NwOpen returned 0; code 0; error: Could not find trusted sessio                                                                                        n id in hello response
Feb  9 14:50:05 rsaaio collectd[4266]: NgNativeReader_NwIPDBExtractor-FastUpdate                                                                                        : failed to connect to device: failed to connect to nws://admin@localhost:56025/                                                                                        ?group=Administrators&cert=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fcerts%2F5cf25615-3288-4                                                                                        a5a-af42-100457cda042.pem&key=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fprivate_keys%2F5cf25                                                                                        615-3288-4a5a-af42-100457cda042.pem
Feb  9 14:50:05 rsaaio collectd[4266]: NgNativeReader_NwBroker-FastUpdate: nwsdk                                                                                         failure: NwOpen returned 0; code 0; error: Could not find trusted session id in                                                                                         hello response
Feb  9 14:50:05 rsaaio collectd[4266]: NgNativeReader_NwBroker-FastUpdate: faile                                                                                        d to connect to device: failed to connect to nws://admin@localhost:56003/?group=                                                                                        Administrators&cert=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fcerts%2F5cf25615-3288-4a5a-af4                                                                                        2-100457cda042.pem&key=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fprivate_keys%2F5cf25615-328                                                                                        8-4a5a-af42-100457cda042.pem
Feb  9 14:50:05 rsaaio collectd[4266]: NgNativeReader_NwConcentrator-FastUpdate:                                                                                         nwsdk failure: NwOpen returned 0; code 0; error: Could not find trusted session                                                                                         id in hello response
Feb  9 14:50:05 rsaaio collectd[4266]: NgNativeReader_NwConcentrator-FastUpdate:                                                                                         failed to connect to device: failed to connect to nws://admin@localhost:56005/?                                                                                        group=Administrators&cert=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fcerts%2F5cf25615-3288-4a                                                                                        5a-af42-100457cda042.pem&key=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fprivate_keys%2F5cf256                                                                                        15-3288-4a5a-af42-100457cda042.pem
Feb  9 14:50:06 rsaaio collectd[4266]: NgNativeReader_NwLogCollector-FastUpdate:                                                                                         nwsdk failure: NwOpen returned 0; code 0; error: Could not find trusted session                                                                                         id in hello response
Feb  9 14:50:06 rsaaio collectd[4266]: NgNativeReader_NwLogCollector-FastUpdate:                                                                                         failed to connect to device: failed to connect to nws://admin@localhost:56001/?                                                                                        group=Administrators&cert=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fcerts%2F5cf25615-3288-4a                                                                                        5a-af42-100457cda042.pem&key=%2Fvar%2Flib%2Fpuppet%2Fssl%2Fprivate_keys%2F5cf256                                                                                        15-3288-4a5a-af42-100457cda042.pem

[JohnKisner]

Dagm,

These errors are different from the original ones. These messages are the collectd's inability to talk to the log decoder (56002), Log Collector (56001), IPDB Extractor (56025), Broker (56003) and the Concentrator (56005).

Based on the new error message you may need to recreate the collectd trust certificates. To do this go to /etc/netwitness/ng and you will see several folders (broker, concentrator, logdecoder, logcollector, and ipdbextractor). In each of these folders is another folder called trustpeers. Within this folder there is anywhere from one file to three files. You will need to delete all the files within these directories. The files should look something like this: 7b754be7.0. These are the trust certificates that collectd uses to talk with the services. Once all these files are removed, run puppet agent -t on the All In One. It should realize that the certificates are gone and regenerate them. However during the regeneration process it will restart the service. So make sure to do this when it is ok to have the services restarting.

Once the services all start back up the new certificates should be in place and being used by collectd. The errors seen above should all go away.