Custom Feed - Failed to access file

[Ofalco]

Hi,

The status of 3 feeds is detected as failed.

When accessing the custom feed configuration and clicking on 'verify,' it returns the error message: 'Failed to access file.

"Upon checking the logs, this error is detected:"

The RSA Netwitness version is 11.5.3.2

"What could be the cause of the problem? According to a similar issue reported on the RSA community, it could be related to certificate errors: https://community.netwitness.com/t5/netwitness-knowledge-base/rsa-netwitness-logs-network-unable-to-access-the-file-error-for/ta-p/677543

If this is not the cause of the problem, which other FQDN should be analyzed in the logs?"

[JohnKisner]

Ofalco,

The first question is when you SSH into the admin server and do a lookup of netwitness what does it return? If it doesn't return an ip address then you need to fix the URL in the feed to point to a location that can be resolved by the admin server. I would for the sake of testing remove netwitness from https://netwitness/nwrpmrepo and put https://127.0.0.1/nwrpmrepo or whatever the admin server's IP address is.

In reality you should move the csv file to a completely different location than in the RPM Repo area. I can see you are on version 11.5.3.2. As we move up in versions we start locking down the repo location and you may no longer be able to access it as you once did. It is best practice to have a file server somewhere within your network that the admin server can resolve to and pull the CSV file from that location. As to the errors in the log that you are seeing it is because the feed creation process can't find the CSV file.

I hope this helps.

[JohnSnider]

While this is not an officially supported option, if you have no other server to host the feed csv from, you can us the script (post 11.4 version) to allow jetty to trust the certificate from the admin server.  if your external feed location uses https, you would need to do this anyway, as the system has no option to not require verification of the cert, so it needs to be added to the truststore

https://community.netwitness.com/t5/netwitness-community-blog/easy-add-recurring-feeds/ba-p/520551