ESA Logs

[RenatoGoncalves]

Hello,

When i go to:

Admin - Services - Event Stream Analysis - Logs i receive an 2 types of error:

If i want to see the historical error:

Unable to process the request because the logging system is not initialized

If i want to see realtime:

Communication Error. Unable to process request

Is there any way to solve this without using SSH to retrieve the logs?

[JohnKisner]

Renato,

Are you only seeing this when you go to the ESA logs or are you seeing this when you go to any logs for any of the services? I suspect that you may need to restart a service to get these logs to appear correctly and I also believe you will see the same issue with the other services but will need to have you confirm first.

Thank you,

Jay Kisner

[RenatoGoncalves]

Hello John,

Only in ESA related. I've stoped and restarted, i rebooted and it stays the same

[JohnKisner]

Renato,

See if there are any errors in the System logs for the UI. Administration -> System Logging. It is possible there may be an issue that we can determine from these logs if it is related to the UI pulling from the ESA service.

[RenatoGoncalves]

I have some errors yes.

2018-09-28T14:50:55.701		ERROR	Can't find resource for bundle java.util.PropertyResourceBundle, key getESA_ANALYTICS_SERVICELabel
2018-09-28T16:01:27.441		ERROR	java.lang.NullPointerException
2018-09-28T16:02:00.156		ERROR	Failed to retrieve authentication entry
2018-09-28T16:02:00.157		ERROR	java.util.concurrent.RejectedExecutionException: Task com.rsa.netwitness.carlos.common.SharedThreadPoolExecutor$TagExclusiveRunnable@238b5516 rejected from com.rsa.netwitness.carlos.common.SharedThreadPoolExecutor@234bcdfe[Terminated, pool size = 0, active threads = 0, queued tasks = 0, completed tasks = 46]
2018-09-28T16:03:20.726		ERROR	java.lang.NullPointerException
2018-09-28T16:03:23.932		ERROR	java.lang.NullPointerException
2018-09-28T16:03:24.739		ERROR	java.lang.NullPointerException
2018-09-28T15:03:43.873		ERROR	Failed to retrieve authentication entry
2018-09-28T15:03:43.874		ERROR	java.util.concurrent.RejectedExecutionException: Task com.rsa.netwitness.carlos.common.SharedThreadPoolExecutor$TagExclusiveRunnable@4416f743 rejected from com.rsa.netwitness.carlos.common.SharedThreadPoolExecutor@ad2dcc9[Terminated, pool size = 0, active threads = 0, queued tasks = 0, completed tasks = 385]
2018-09-28T16:04:46.365		ERROR	java.lang.NullPointerException

[JohnKisner]

Renato,

You may want to perform a restart of the jettysrv service or a complete restart of the UI server. If there are communication issues due to null pointer references you may need several different services restarted on the UI server. The reason I suggest a full restart is if you just restart jettysrv and one of the services that it relies on isn't started correctly the UI won't come up. Jettysrv is specifically configured not to fully start if any of the underlying services are not fully functional. This is by design so that when you are in the UI all pieces are functioning.

[RenatoGoncalves]

Ok John,

I'ĺl do that and i ĺl give you feedback