NetWitness Investigate->Events page shows unexpected error.

[#1]

Article Number

000039677

Applies To

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.5.X
Platform: CentOS
O/S Version: 7
 

Issue

Login to Netwitness UI and Go to Investigate-> Events page which shows the below error.

UI error:

Unexpected error loading the list of Brokers, Concentrators, and other services to investigate. This may be due to a configuration or connectivity issue.

Image description

Cause

This issue is due to over usage of Investigate server.

Resolution

1. Please restart Investigate server service using below command in NwServer.

systemctl restart rsa-nw-investigate-server.service

       
       2. Verify that service is running good using below command.

systemctl status rsa-nw-investigate-server.service

       3. Then Go to Investigate-> Events page which will be accessible without error.

 

Workaround

Please use Enable Legacy Events document for getting Legacy Events page as an alternative when Events page is not available.