Hi, I am getting Intialization error in Broker Service.

[PoojaSharma1]

I am geting Intialization error in Broker service and when i am trying to start aggregation. it is throwing error "Aggregation failed to start. TransportException :terminated." Please help.

[JonathanSaxon]

That log entry alone won't be sufficient to troubleshoot the problem. 

Please consider opening a support case and posting the results from the nwtech.sh script.

Also, if you can, please post the 10 lines before and after that logged event from /var/log/messages.  That may provide enough detail to identify the problem.

In the meantime, please make sure no filesystems have reached 100% utilization using the df -h command. 

[DavidPoirier]

Hi Pooja,

Was this a working environment? if so, what changed? Its possible that you may have pushed a custom XLM to that broker that caused this possible failure. I agree with Jonathan. the messages file will have some additional information as to the actual cause.

Thank you

David

[DavidPoirier]

Hi Pooja,

Look in the /etc/netwitness/ng on the broker and look at the index*.xml  was it changed?

check the size.   -rw-r--r--. 1 root root 1861 Apr  1 00:38 index-broker.xml

cd /

# find . -name core.* -print

Do you have any core files in the broker?

Thank you

David

[PoojaSharma1]

Hi

I have got this resolved with the help of support. The custom index file was missing header.

Thanks all for your helpful comments.