How to Install and use NetWitness Upgrade PreCheck CLI tool
Issue
The pre-upgrade checks verify the following:- Security client file check - Ensures security-client-amqp.yml file is not present.
- node 0 NW service-id status - Ensures all the service-ids are intact.
- node 0 NW services status - Check the status of all the services on node 0.
- node x NW services status - Check the status of all the services on node x.
- Broker service Trustpeer symlink - Ensures that broker symlink file (/etc/netwitness/ng/broker/trustpeers/) is not broken.
- Yum external repo check - Ensures that external repos are not present and not enabled.
- RPM DB index check - Checks if the RPM DB is corrupted.
- Salt master communication - Verifies the salt communication from node 0 to all the nodes.
- node 0 certificate check - Checks if any certificates are missing, expired, or valid issuer type.
- Mongo authentication - Validates the deploy_admin credentials fetched from security-cli-client using mongo client.
- Rabbitmq authentication - Validates the deploy_admin credentials fetched from security-cli-client using RabbitMQ
Resolution
Please follow the below steps to install HotFix:- SSH to Admin server box and place the HotFix rpm (Attached to KB) file under /root.
- Install the rpm For 11.6.X,
rpm -ivh rsa-nw-prechecks-hotfix-1.0.0-2110120940.5.52f9525.el7.noarch.rpm
OR
rpm -ivh rsa-nw-prechecks-hotfix-1.0.0-2110120940.5.52f9525.el7.noarch.rpm --forceFor 11.4.X and 11.5.X- rpm -ivh rsa-nw-prechecks-hotfix-1.0.0-2110120853.5.d9d4714.el7.noarch.rpm
rpm -ivh rsa-nw-prechecks-hotfix-1.0.0-2110120853.5.d9d4714.el7.noarch.rpm --force
- Execute the following command:
nw-precheck-tool upgrade-checklist
- Verify the logs are updated properly in: /var/log/netwitness/precheck-tool/checklist.log
rpm -qa | grep prechecks-hotfix | xargs -I{} yum remove -y {}
Product Details
RSA Product Set: RSA NetWitness PlatformRSA Product/Service Type: AdminServer
RSA Version/Condition: 11.4.X,11.5.X,11.6.X
Platform: CentOS
O/S Version: 7
Summary
Pre check upgrade tool is used to identify any issues that may result in the upgrade failure and check the health of node 0 and node-x services status.
Approval Reviewer Queue
RSA NetWitness Suite Approval Queue