Skip to content
  • There are no suggestions because the search field is empty.

Reports->Respond DB rule in RSA NetWitness Platform throws Error while fetching schema for given type: IMDB

Issue

When Reports-Respond DB rule tried, it throws below error in GUI and logs.

Rule
 
/var/netwitness/re-server/rsa/soc/reporting-engine/logs/reporting-engine.log
2019-12-10 10:28:55,887 [GetSchemaRequest_757551] INFO com.rsa.soc.re.ce.server.ReportingEngineService - Received request : GetSchemaRequest, user : admin
2019-12-10 10:28:55,887 [GetSchemaRequest_757551] ERROR com.rsa.soc.re.ce.command.GetSchemaCommand - Error processing command
com.rsa.soc.re.exception.ReportingException: Error while fetching schema for given type : IMDB
at com.rsa.soc.re.queryprocessor.schema.DataSourceSchemaCache.findDefaultDataSourceNameForType(DataSourceSchemaCache.java:98)
at com.rsa.soc.re.queryprocessor.schema.DataSourceSchemaCache.getSchema(DataSourceSchemaCache.java:44)
at com.rsa.soc.re.ce.command.GetSchemaCommand.execute(GetSchemaCommand.java:56)
at com.rsa.soc.re.ce.server.ReportEngineController.process(ReportEngineController.java:56)
at com.rsa.soc.re.ce.server.ReportingEngineService.onRequest(ReportingEngineService.java:68)
at com.rsa.soc.re.ce.server.ReportingEngineService.onRequest(ReportingEngineService.java:26)
at com.rsa.netwitness.carlos.transport.spi.AbstractMessageChannel$5.run(AbstractMessageChannel.java:634)
at com.rsa.netwitness.carlos.common.SharedThreadPoolExecutor$TagExclusiveRunnable.run(SharedThreadPoolExecutor.java:100)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: com.rsa.soc.datasource.DataSourceException: No data sources defined or unable to create connection to data source.
at com.rsa.soc.datasource.mongo.MongoDataSourceConnectionFactory.getDefaultDataSourceConnection(MongoDataSourceConnectionFactory.java:114)
at com.rsa.soc.datasource.DataSourceManager.getDefaultDataSourceConnection(DataSourceManager.java:134)
at com.rsa.soc.datasource.DataSourceManager.getDefaultDataSourceConnection(DataSourceManager.java:115)
at com.rsa.soc.re.queryprocessor.schema.DataSourceSchemaCache.findDefaultDataSourceNameForType(DataSourceSchemaCache.java:88)
 
 

Cause

It is required to grant additional permission to Respond data source to fetch schema for IMDB.


Resolution

Follow below steps to fix the error.
  1. Login to NetWitness GUI and go to ADMIN->Services->Reporting Engine->View->Config->Data Sources tab.
  2. Select Respond data source and click on Data Source Permissions button.
  3. Grant Read-Only permission for Respond_Administrator as below and save.
    REp

    4. Go to Monitor->Reports page to try Respond DB rule which can be successful now.

Product Details

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.1.0.3
Platform: CentOS
O/S Version: 7

Summary

This document outlines the procedure to fix error and run Respond DB rule.


Approval Reviewer Queue

RSA NetWitness Suite Approval Queue