Skip to content
  • There are no suggestions because the search field is empty.

Cloudtrail event source test connection fails for proxy authentication with an error in Netwitness Platform

Issue

When you edit a Cloudtrail event source configured with a proxy, the test connection fails with an error related to proxy authentication even though the proxy password has not changed.
The following error can be found in logcollector /var/log/messages:
Test connection failed:unspecified error connecting to S3, check network connection and make sure bucket name 'sa-vlc-ct' and aws prefix 'cloudtrail-/AWSLogs/907171583576/CloudTrail/us-west-1/' are spelled correctly: [Errno -71] Error talking to HTTP proxy testproxy.sa.emc.com:3128: 407 (Proxy Authentication Required) could not connect to bucket


Workaround

Perform the following steps:
  1. Re-enter the Proxy Password and Secret key.
  2. Click Test Connection which will result in the test connection being successful.
  3. Click Save.
The event source configuration is saved successfully.

Resolution

This issue is currently being investigated by the Engineering team in order to resolve it in a future release.
If you are experiencing this issue, contact RSA Customer Support and quote this article number for further assistance.

Product Details

Netwitness Product Set: NetWitness Platform
Netwitness Product/Service Type: Log Collector, User Interface
Netwitness Version/Condition: 11.x, 12.x or later
Platform: CentOS/Alma Linux

Summary

Log Collector 'plugins' collection issue for cloudtrail .


Approval Reviewer Queue

Technical approval queue