Skip to content
  • There are no suggestions because the search field is empty.

RSA NetWitness Concentrator/Decoder service stuck Initializing Databases

Issue

After completing the RSA NetWitness Logs and Packets upgrade, then rebooting the Decoder and Concentrator, in the web user interface, Administration > Services, the Decoder or Concentrator services appear to be stuck showing "Initializing Databases". The services are confirmed to be functioning normally.

User-added

Cause

There is a display error in the web user interface.


Resolution

1. Confirm the Decoder capture, or Concentrator aggregation is working.

For the service in the web user interface that is showing "Initializing Databases", go to Administration > Services > {Initializing_Databases_Service} > View > Stats
For the Decoder (Log or Packet) confirm the current Capture Packet Rate is above zero.
For the Concentrator confirm the Status shows "consuming", and the Rate is above zero.

2. Perform a Test Connection on the service.

This can sometimes resolve the display issue.
  • Go to Administration > Services
  • Select the service with the amber icon showing "Initializing Databases".
  • Click the Edit Service icon, and click the "Test Connection" button.
  • It should respond "Test connection successful".
  • Click Save.

3. Restart the jettysrv service

If the previous step didn't clear the amber icon showing "Initializing Databases", then ssh login to the SA Server, and restart the jettysrv service with the command,

systemctl restart jetty

Product Details

RSA Product Set: RSA NetWitness Logs and Packets
RSA Product/Service Type: SA Core Appliance
RSA Version/Condition: 11.x,12.x
Platform: CentOS, AlmaLinux

Approval Reviewer Queue

Technical approval queue