Article Number
000039878
Applies To
RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.6.0.0
Issue
With Netwitness Azure11.6 VHD, creating a new image and then rolling out a new virtual machine. When running the nwsetup-tui it gets to the security server service starting, and then it fails.
Following events are logged in /var/log/netwitness/bootstrap/bootstrap.log, as we can see it hangs at security-cli-client --get cert command.
Image descriptionIn /var/log/rabbitmq-server/rabbitmq-server.log, following events logged.
As we can see free space available (~8GB) < free disk limit (~17GB).
Image description
Cause
One step is missing from NW 11.6 Azure Installation Guide to update the default partition size. Hence there is not sufficient disk space available for rabbitmq - which in turn might block the rabbtimq requests/connections resulting in a hang while running security-cli-client --get-cert command that gets executed as part of [rsa-security-server::tokencert] chef recipe.
Resolution
Here is default partition size for Azure virtual machine.
There is about 5.4GB and 7.7GB disk space available for / and /var/netwitness partition which is not sufficient for rabbitmq.
Image descriptionTo resolve this issue, Increase the size of root and nwhome disk partitions before installing node-zero using nwsetup-tui.
Please refer section: Updating Partition Size (Page:
😎 under Azure Configuration Recommendations in 11.5 Azure installation guide (attached).
Screenshot below:
Image description