This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
      • Netwitness XDR
      • EC-Council Training
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
    • Role-Based Training
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions
  • NetWitness Community
  • Discussions
  • RSA Security Analytics wrong time
  • Options
    • Subscribe to RSS Feed
    • Mark Topic as New
    • Mark Topic as Read
    • Float this Topic for Current User
    • Bookmark
    • Subscribe
    • Mute
    • Printer Friendly Page

RSA Security Analytics wrong time

AdolfoSotelo
AdolfoSotelo Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Report Inappropriate Content

‎2020-10-15 06:31 PM

Hello guys,

 

I have an issue with time between SA server, Log decoder and concentrator server. Let me explain, when I login to SA UI I see a mismatch time between all hosts.

 

Screenshot at Oct 15 16-47-37.png

 

When I checked the time in CLI the time is the correct one:

 

Screenshot at Oct 15 16-49-38.png

 

I used this KB Host GS: Set Network Time Source and tried to setting the host time with a "host task", but it didn't work.

 

Screenshot at Oct 15 17-06-27.png

 

I checked again and the issue remains.

 

Screenshot at Oct 15 17-08-58.png

 

I also checked the /var/log/rabbitmq logs and I found this error:

 

Screenshot at Oct 15 16-56-02.png

 

According to this KB Troubleshoot Log Collection Configuration it's referring a clock not synchronized.

 

So, I tried again with setting the time, but this time with another option:

 

Screenshot at Oct 15 17-26-28.png

 

The NTP was the same that the windows computer had. I tried with source=local too with the same result.

 

I don't how to proceed in here.

 

Hope you can help me.

Labels:
  • Labels:
  • RSA NetWitness Orchestrator
  • Community Thread
  • Discussion
  • Forum Thread
  • NetWitness
  • NetWitness Orchestrator
  • NW
  • NWO
  • NWP
  • Orchestration
  • Orchestrator
  • RSA NetWitness
  • RSA NetWitness Orchestrator
  • RSA NetWitness Platform
  • RSA Security Analytics
  • SOAR
0 Likes
Reply
  • All forum topics
  • Previous Topic
  • Next Topic
0 REPLIES 0
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.