2014-02-05 09:54 AM
So just recently, we upgraded to 10.3.1. Unaware of a new indexing process from here on after the upgrade, we noticed our concentrators did not come back up immediately. We have a log hybrid and a packet hybrid, both with 22TB DACs attached and both up in the 90% full range and already rolling off data. This being said...our packet hybrid came back up after a couple of hours, the log hybrid did not and wasnt started the next day. I started the concentrator service...a message I continue to see is "[meta] [info] Initialized *400000+ files* database files out of 6532024 total in /var/netwitness/concentrator/metadb". Does the service remain unavailable until these databases are initialized? I want to do a ticket on this but something tells me that until this is completed, the service is unavailable. Can someone verify this for me?
2014-04-07 10:51 PM
Thank you for the reply Scott, we no longer have the logs its been quite a while since we updated from that. Much appreciated. More power.