When you update from RSA Security Analytics 10.5.2.0 or 10.6.0.0 to 10.6.4.0 in All-in-One Logs setup from Security Analytics UI, the puppet and rabbitmq-server services are stopped.
Example Update Error screen in the user interface:
Cannot complete the Update.
Resolve the following errors and try again.
:"Execution of '/usr/yum -d 0 -e 0 -y update rsa-puppet-scripts' returned 1: Error:
Package: python-libs-18.104.22.168.el6_8.i686(@RSASoftware)\n Requires: libcrypto.so.10\n
Removing: openssl-1.0.1e-48.el6_8.i686 (@RSASoftware)\n Requires: libcrypto.so.10\n
Obsoleted By: libowb1_0_1-22.214.171.124-1.x86_64 (@RSASoftware)\n Not found\n Available:
The package nwlogcollectortools also fails to upgrade.
Upgrade hangs due to rabbitmq-server being in stopped status.
Upgrade process stopped after this line in the /var/log/yum.log file:
Mar 10 19:44:13 Updated: rabbitmq-server-3.5.7-2.el6.noarch
RSA Security Analytics AIO devices are no longer supported beginning in RSA NetWitess 11. If this issue has occurred in 10.6.x the workaround is recommended. If you are experiencing this issue and still need assistance, contact RSA Customer Support and quote this article number.
Perform the following:
Start the puppet service using the following command:
service puppet start
In the background, this will run `puppet agent -t` which should restart any stopped instances of rabbitmq-server.
In the RSA Security Analytics UI, check if the update is successful and click Reboot.
After the RSA Security Analytics user interface is back up, check the updates on the Host view and click Update.