This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Knowledge Base
Find answers to your questions and identify resolutions for known issues with knowledge base articles written by NetWitness experts.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
  • NetWitness Community
  • Knowledge Base
  • Trying to install a service in a new host fails in RSA NetWitness 11.x
  • Options
    • Subscribe to RSS Feed
    • Bookmark
    • Subscribe
    • Email to a Friend
    • Printer Friendly Page
    • Report Inappropriate Content

The content you are looking for has been archived. View related content below.

Trying to install a service in a new host fails in RSA NetWitness 11.x

Article Number

000001546

Applies To

RSA Product Set: NetWitness Logs and Packets
RSA Version/Condition: 11.x
Platform: CentOS
O/S Version: 7

 

Issue

After discovering and enabling a new host in the UI > Hosts page, when you try to Install a service in the new host, it takes a long time to finish Installing the service (more than 10 minutes) and finally fails with the error:

    Install error. View details.

    Host installation failed.
    Error installing <service> on host X.X.X.X.



Cause

This normally happens when the 5671 port has not been opened between the host and the NW Server. The 5671 port must be opened in a bi-directional way between the host and the NW Server for the provisioning to be successful.

You can verify if the port is open by using the curl command from the Host command line:

    curl -v <NWServerIP>:5671

For example, the following output shows that the port is open and the connection is successful:
    
# curl -v 192.168.2.101:5671
* About to connect() to 192.168.2.101 port 5671 (#0)
*   Trying 192.168.2.101...
* Connected to 192.168.2.101 (192.168.2.101) port 5671 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.29.0
> Host: 192.168.2.101:5671
> Accept: */*
>


If the port is blocked, you will see the following output instead:

# curl -v 192.168.2.101:5671
* About to connect() to 192.168.2.101 port 5671 (#0)
*   Trying 192.168.2.101...
* Connection timed out
* Failed connect to 192.168.2.101:5671; Connection timed out
* Closing connection 0
curl: (7) Failed connect to 192.168.2.101:5671; Connection timed out

 

Resolution

Please confirm that your firewall is not blocking the 5671 port and make sure it is open in a bidirectional way (from Host to NW Server and from NW Server to Host).
 
Tags (12)
  • Customer Support Article
  • KB Article
  • Knowledge Article
  • Knowledge Base
  • NetWitness
  • NetWitness Platform
  • NW
  • RSA NetWitness
  • RSA NetWitness Platform
  • RSA Security Analytics
  • Security Analytics
  • SIEM
0 Likes
Was this article helpful? Yes No
No ratings

In this article

Version history
Last update:
‎2022-02-10 01:49 PM
Updated by:
Administrator nwinfotech Administrator

Related Content

Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.