Skip to content
  • There are no suggestions because the search field is empty.

NetWitness Log Collector S3 Universal plugin collection stopped with test connection failing error No Messages received from the SQS queue

Issue

NetWitness Log Collector configured S3 Universal plugin using Amazon S3 Universal Connector  

The Event source test connection fails with the " No Messages received from the SQS queue" error as below.
awsencry

Cause

This issue is due to encryption that is enabled in AWS using Amazon SQS queues should be encrypted at rest..

Resolution

The SQS key does not hold any sensitive data. When an object is created in S3 bucket a notification is sent to the queue with the object creation time and the object path. So, there is no need to encrypt the Queue as the queue only holds these notifications. Hence, Please disable the encryption in AWS using Amazon SQS queues should be encrypted at rest.

Product Details

NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type: Log Collector
NetWitness Version/Condition: 11.X,12.X
Platform: CentOS 7 / Alma


Summary

This document outlines the procedure to collect logs from S3 Universal plugin.


Approval Reviewer Queue

Technical approval queue