NetWitness Investigate->Events page shows unexpected error.
Issue
Login to Netwitness UI and Go to Investigate-> Events page which shows the below error.UI error:
Unexpected error loading the list of Brokers, Concentrators, and other services to investigate. This may be due to a configuration or connectivity issue.
Cause
This issue is due to over usage of Investigate server.
Workaround
Please use Enable Legacy Events document for getting Legacy Events page as an alternative when Events page is not available.
Resolution
- Please restart Investigate server service using below command in NwServer.
systemctl restart rsa-nw-investigate-server.service
2. Verify that service is running good using below command.
systemctl status rsa-nw-investigate-server.service
3. Then Go to Investigate-> Events page which will be accessible without error.
Product Details
RSA Product Set: RSA NetWitness PlatformRSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.5.X
Platform: CentOS
O/S Version: 7
Summary
This document outlines the procedure to fix unexpected error.
Approval Reviewer Queue
RSA NetWitness Suite Approval Queue