Skip to content
  • There are no suggestions because the search field is empty.

Policy Publishing is Failing from Centralized Content Management (CCM) System in NetWitness XDR

Issue

Policy publishing is failing from Centralized Content Management (CCM) system. The following error message is displayed while trying to publish the policy:  
Capture.PNG


Cause

There were some breaking LIVE API changes on the 21st and 26th October 2022. Customers who installed or upgraded source-server during that period will encounter this issue.


Resolution

     1. Take backup of source-server DB from Mongo using the following command.

mongodump --host localhost -d source-server --port 27017 -u -p  --authenticationDatabase admin

  1. SSH to SA node.

  2. Copy script file (updateContentLibrary.js) to SA node.

  3. Run the following mongo command:

mongo localhost/source-server -u -p --authenticationDatabase admin

  1. Restart the source server and wait for 5 minutes.

  2. Publish failed policy again.


Notes

  • This issue is fixed with latest changes. Only the customers who upgraded or freshly installed the source-server on the 21st and 26th October 2022 will face some CCM deployment issue.
  • Issue link: https://nw-corp.atlassian.net/browse/ASOC-124423

Product Details

RSA Product Set: NetWitness Platform
RSA Version/Condition: 12.1 and later
Platform: CentOS
O/S Version: 6/7


Approval Reviewer Queue

Technical approval queue