Article Number
000001437
Applies To
RSA Product Set: Security Analytics, NetWitness Logs & Network
RSA Product/Service Type: Head Unit / Security Analytics Server
RSA Version/Condition: 10.5.0.0, 10.5.0.1, 10.5.0.2, 10.5.2, 10.6.0.0, 10.6.0.1, 10.6.0.2
Platform: CentOS
O/S Version: 6
Issue
When Metered Licenses are applied to the RSA Security Analytics server, other services such as the ESA, Concentrator, etc. are unable to become licensed.
The Security Analytics service logs show the following error:
/var/lib/netwitness/uax/logs/sa.log:
2016-05-16 18:00:00,001 [taskScheduler-4] ERROR com.rsa.smc.sa.core.licensing.EndpointLicenseResolver -
Error occurred while applying SIEM or NETMON licenses - null
Cause
This issue occurs when RSA Security Analytics has passed the 90-day compliance mark for generating Out-Of-The-Box trial licenses for new services attached to Security Analytics.
Resolution
This issue has been addressed in the following releases: RSA Security Analytics versions 10.5.2.1, 10.6.1.1 and 10.6.2.
Workaround
Please note that even with the Out-of-Compliance banner, versions 10.5.X and later will continue to function as expected, even if there are services that appear to be unlicensed.
In other words, this defect has a cosmetic but not functional impact.
For more information about the Out-Of-Compliance banner, please see:
https://community.rsa.com/docs/DOC-42855
