Upgrading the Warehouse Connector to 10.3 SP1 10.3.1

[Anonymous]

Hey SA Community:

     I want to bring a minor but possibly common misconfiguration to your attention regarding Security Analytics Warehouse and Warehouse Connector.  Recently I've come across this misconfiguration a few times, so I thought it would be good to let you all know about it.

      In this scenario, when freshly installing 10.3 SP1 or performing an upgrade from 10.2, for those environments with Security Analytics Warehouse, there have been a few instances of Warehouse Connector 10.3 SP1 being installed fresh with a new SA deployment or else during an upgrade from 10.2.X performing a straight install of Warehouse Connector 10.3 SP1 rather than using this RPM as an upgrade.

Should this happen you can expect the Source and Destination to be configured properly and error-free, however, when creating the Stream the installer may receive the following error message:

"Failed to execute .: <unspecified file>(1): expected object or array.Incomplete stream will be deleted"

If you find this scenario during a fresh install or upgrade of SA, the solution is very simple:

1)  Uninstall Warehouse Connector 10.3 SP1

2)  Install Warehouse Connector 10.3

3)  Upgrade Warehouse Connector from 10.3 to 10.3 SP1

If you have any questions on this post, please let me know.

Cheers,

Gene

[huanzhou1]

Thanks for sharing.

[Anonymous]

Hello Gene,

As a consultant, I am deploying a RSA Warehouse virtually in their environment, but after doing all the required configuration on the SAW end, but I am still unable to add the warehouse service on the RSA SA?

And I have my SA on 10.4.02 and my warehouse is on 10.3.2, how I upgrade the SAW to the latest version?

Do I need to just simply upgrade it through the yum-update command, because I have only added the IP Addresses on the nodes and run the script only.

Kindly suggest, what I need to do to get it resolved.