This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
      • Netwitness XDR
      • EC-Council Training
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
    • Role-Based Training
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions
  • NetWitness Community
  • Discussions
  • Re: Error in sftp agent
  • Options
    • Subscribe to RSS Feed
    • Mark Topic as New
    • Mark Topic as Read
    • Float this Topic for Current User
    • Bookmark
    • Subscribe
    • Mute
    • Printer Friendly Page

Error in sftp agent

AtulChavan
AtulChavan Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Report Inappropriate Content

‎2017-01-18 07:29 AM

Hi Guys,

 

I am integrating IIS server. I have done all the changes as per document but not receiving logs. When I ran sasftpagent -v command on event source, I receive following error.

pastedImage_1.png

 

I have regenerated key pairs couple of times but facing same issue. Is there any way to check connection between event source and Log collector.

 

Also, if possible can anyone share sftpagen.conf file.

Labels:
  • Labels:
  • RSA NetWitness Endpoint
  • Community Thread
  • Discussion
  • ECAT
  • EDR
  • Endpoint
  • Forum Thread
  • NetWitness
  • NWE
  • RSA NetWitness Endpoint
  • RSA NetWitness Platform
0 Likes
Reply
  • All forum topics
  • Previous Topic
  • Next Topic
3 REPLIES 3

NaushadKasu1
Trusted Contributor NaushadKasu1 Trusted Contributor
Trusted Contributor
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Report Inappropriate Content

‎2017-01-20 05:34 PM

What does your sasftpagent.conf look like?  Also, what are the permissions on the /var/netwitness/logcollector directory?

1 Like
Reply

AtulChavan
AtulChavan Beginner
Beginner
In response to NaushadKasu1
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Report Inappropriate Content

‎2017-01-21 11:12 AM

This issue is now resolved. I re generated keys and it worked. Is it necessary to run schedule job? If yes, for which file I should create schedule job?

0 Likes
Reply

NaushadKasu1
Trusted Contributor NaushadKasu1 Trusted Contributor
Trusted Contributor
In response to AtulChavan
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Report Inappropriate Content

‎2017-01-22 02:23 PM

The Windows SA SFTP Agent software runs as a service already.  You just need to start it and ensure it's running as a service account that has the key cached.

0 Likes
Reply
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.