Unable to restore ContextHub data using recovery tool on RSA NetWitness Platform 11.5.x.x or below

[#1]

Article Number

000039827

Applies To

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Context Hub service
RSA Version/Condition: 11.5.x.x or below
Platform: CentOS
O/S Version: 7
 

Cause

The nw-recovery-tool or nw-failover tool fails to restore contexthub-server data.

Resolution

Note: These steps are applicable only if the nw-recovery-tool is successful in restore mode for both the Admin server and ESA.
To restore contexthub-server database on ESA and Admin server, perform the following:
 

1. SSH to the ESA server and stop the contexthub-server by running the following command:

   service rsa-nw-contexthub-server stop

2. SSH to the Admin server.
3. Run the following command on the existing contexthub-server database: 

   mongo -u deploy_admin -p <deploy_admin password> --authenticationDatabase    admin contexthub-server --eval "printjson(db.dropDatabase())"

        Replace <deploy_admin_password> with your password.
    
4. Navigate to the mongo backup location:

   cd /var/netwitness/backup/mongo

5. Run the following command to restore the Context Hub database:

   mongorestore --verbose --gzip -u deploy_admin -p <deploy_admin password> --db contexthub-server --authenticationDatabase admin contexthub-server

        Replace <deploy_admin_password> with your password.
    
6. SSH to the ESA server and start the contexthub-server:

   service rsa-nw-contexthub-server start