Skip to content
  • There are no suggestions because the search field is empty.

RSA NetWitness AzureMonitor Event source test connection failing

Issue

AzureMonitor Event source that is configured using  Azure Monitor Event Source Configuration Guide and test connection fails with below error.
 
Test connection failed:Got exception while parsing input parameters: 'NoneType' object has no attribute 'group' Could not connect to the eventhub. Received 'AzureMonitorConfig' object has no attribute 'eventhub_name'

Cause

This failure is due to incorrect event hub string value in Event Source Configuration.


Resolution

Please verify event hub string details are required in the below format.

 Endpoint=sb://[Namespace Name].servicebus.windows.net/;SharedAccessKeyName=[SAS Key Name];SharedAccessKey=[SAS Key];EntityPath=[Event Hub Name]
  1. Then Contact the internal AzureMonitor team to get event hub string details.
  2. Use the correct details in LogCollector->Config>Event Sources->Plugin/Config page.
  3. Then do a test connection that should be successful now.
 

Product Details

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Core Appliance
RSA Version/Condition: 11.X
Platform: CentOS
O/S Version: 7

Summary

This document outlines the procedure to fix failure message for Azuremonitor event source configuration.


Approval Reviewer Queue

RSA NetWitness Suite Approval Queue