Chart Error

[Anonymous]

ive just started to see this error on my dashlettes, as well as the associated charts.

Unable To Fetch Schema From The Data Source.

grepping through the messages files yields nothing. i have opened a ticket but in an effort to see if anyone else has come across this im opening up a topic here.

mark

[Anonymous]

Web/File reconstruction doesn't work for us. We initially thought something was setup incorrect but support came back and verified ours doesn't work due to a bug fixed in 10.3.3

[Anonymous]

Do you have the reconstruction limit to low?  It is default at 100 packets but generally a lot of traffic is higher than that.

[Anonymous]

I haven't tried to raise it... What limit do you think is reasonable?

[Anonymous]

I put ours at 500, it doesn't seem to be affecting the speed of the system from what I can see. 

[Anonymous]

i had my limit set high in the fat client i think it was between 2k and 5k.

has anyone else seen an issue when you go to view the packets and you java errors?

it doesnt seem to happen often, and some how looks like it might be related to the broker leaving alot of connections open. ( ie cycle the services on the broker) (another feature)

[RSAAdmin]

Hello.

Is the issue with reconstruction and it is causing the chart error or are these two separate issues?

Paul

[Anonymous]

Separate issues, they just asked the question...

[Anonymous]

By the way, changing it to 500 doesnt make a difference. I get No Data or just the get requests. It doesnt actually reconstruct the page.

[RSAAdmin]

Hi Mark and jmarshall,

I am one of the Regional Product Managers for Security Analytics.  I would like to look into the issue that you have identified here and follow up with the community.  Can you provide a little more context so that I can track down the issue and let everyone know the status?

Regards,

Paul

[Anonymous]

Paul,

     Thanks, that would be great.Below is my ticket # with logs, info and captures.

Case Number: 00412669 - Recreate/Reconstruct function not working

Thanks,

Jeff