Available Event Source Types is stuck on Loading in RSA Security Analytics

[#1]

Article Number

000034130

Applies To

RSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics UI, Log Collector
RSA Version/Condition: 10.4, 10.5, 10.6
 

Issue

In Log Collector > Config > Event Sources tab when trying to add a new Event Source Type the box "Available Event Sources Types" is displayed but is stuck on Loading.

Image description

Cause

Under some circumstances the files containing the Event Sources Types may be corrupt.

They are located in the folder:
/etc/netwitness/ng/logcollection/content/collection/

It is possible to check the integrity of the Event Source xml files like in the example below:
cat /etc/netwitness/ng/logcollection/content/collection/snmptrap/snmptrap.xml

If the file is not a valid xml the Available Event Source Types box will display "Loading" and will not allow to go further.

Resolution

Check the content of the xml files in the Event Source folders in /etc/netwitness/ng/logcollection/content/collection/.

If the files are not valid xml it may be needed to restore them from a valid backup.

If a backup is not available or if assistance is needed please contact Tech Support.