Troubleshoot the Warehouse Connector

The following information suggests the possible issues that NetWitness users may encounter when adding a Warehouse service to the Reporting Engine as a data source for reporting in NetWitness. Look for explanations and solutions in this section.

While adding a Warehouse service to the Reporting Engine as a data source for reporting, you may observe some of the errors listed in this document. Information is provided on how to troubleshoot the errors and add the data source successfully.

The following figure shows the New Service dialog.

netwitness_wc_addwhdatasourcetore.png

For more information, see "Add Warehouse as a Data Source to Reporting Engine" in the Reporting Engine Configuration Guide.

Error Possible Solutions
Could not open connection to HiveServer
  • Ensure that the HiveServer2 is running on the Host.
  • Check if the port provided can be accessible from the Reporting Engine server.
No Schema found in HDFS path

Ensure that meta avro data file(s) are available in the HDFS path
(<HDFS Path>/rsasoc/v1/sessions/meta) mentioned.
The following figure shows an example of the command to check the files in hdfs.

netwitness_chkflscmd.png

Could not open connection to HiveServer, GSS initiate failed GSS initiate failed errors will be observed only in the case of Kerberos enabled Hive.
Ensure that the proper keytab file is provided and it should have read options for the rsasoc user (user on which the Reporting Engine Server runs).
Ensure that the system time is synchronized between KDC, Hadoop (HortonWorks) server, and the Reporting Engine system.

Add SFTP Destination

To add SFTP destination to Warehouse Connector, you need to follow the below steps:

  1. SSH to NetWitness Host and run the following command to edit ssd_config file:
    vi/etc/ssh/sshd_config file
  2. Do not comment HostKey/etc/ssh/ssh_host_rsa_key
  3. You must append KexAlgorithms +diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1
  4. Run the following command to restart NetWitness Host:
    systemctl restart sshd
  5. On Warehouse Connector Host SSH to NetWitness Host and run the following command:
    ssh -o "HostKeyAlgorithms ssh-rsa" root@<NWhost_IP>
    For example, ssh -o "HostKeyAlgorithms ssh-rsa" root@10.10.10.10
  6. Run the following curl command on Warehouse Connector Host to authenticate:
    curl -vvvv sftp://root:netwitness@<NWhost_ip>:22/root/
    For example, curl -vvvv sftp://root:netwitness@<10.10.10.10>:22/root/
  7. You can now add SFTP Destination from UI.