Unable to restore ContextHub data using recovery tool on RSA NetWitness Platform 11.5.x.x or below

[#1]

Article Number

000002171

Applies To

NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type:  Context Hub service
NetWitness Version/Condition: 11.5 and earlier
Platform: CentOS 7

Cause

The nw-recovery-tool or nw-failover tool fails to restore contexthub-server data.

Resolution

Note: These steps are applicable only if the nw-recovery-tool is successful in restore mode for both the Admin server and ESA.
To restore contexthub-server database on ESA and Admin server, perform the following:
 

1. SSH to the ESA server and stop the contexthub-server by running the following command:

   service rsa-nw-contexthub-server stop

2. SSH to the Admin server.
3. Run the following command on the existing contexthub-server database: 

   mongo -u deploy_admin -p <deploy_admin password> --authenticationDatabase    admin contexthub-server --eval "printjson(db.dropDatabase())"

        Replace <deploy_admin_password> with your password.
    
4. Navigate to the mongo backup location:

   cd /var/netwitness/backup/mongo

5. Run the following command to restore the Context Hub database:

   mongorestore --verbose --gzip -u deploy_admin -p <deploy_admin password> --db contexthub-server --authenticationDatabase admin contexthub-server

        Replace <deploy_admin_password> with your password.
    
6. SSH to the ESA server and start the contexthub-server:

   service rsa-nw-contexthub-server start