NetWitness Log Collector S3 Universal plugin collection stopped with test connection failing error No Messages received from the SQS queue

[#1]

Article Number

000002142

Applies To

NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type: Log Collector
NetWitness Version/Condition: 11.X,12.X
Platform: CentOS 7 / Alma

Issue

NetWitness Log Collector configured S3 Universal plugin using Amazon S3 Universal Connector  

The Event source test connection fails with the "No Messages received from the SQS queue" error as below.
Image description

Cause

This issue is due to encryption that is enabled in AWS using Amazon SQS queues should be encrypted at rest..

Resolution

The SQS key does not hold any sensitive data. When an object is created in S3 bucket a notification is sent to the queue with the object creation time and the object path. So, there is no need to encrypt the Queue as the queue only holds these notifications. Hence, Please disable the encryption in AWS using Amazon SQS queues should be encrypted at rest.