Skip to content
  • There are no suggestions because the search field is empty.

RSA Security Analytics/NetWitness Platform Broker service reports an initialization error and fails to start

Issue

RSA Security Analytics / NetWitness Logs & Network Broker service reports an initialization error and fails to start.

The /var/log/messages file reports errors similar to the following:

Aug 21 19:08:12 NTW-TPC-NWB-001 nw[3549]: [Index] [info] Using custom language file found at /etc/netwitness/ng/index-broker-custom.xml
Aug 21 19:08:12 NTW-TPC-NWB-001 nw[3549]: [Engine] [warning] Module broker failed to load: Language key handle in file '/etc/netwitness/ng/index-broker-custom.xml' has undefined format
Aug 21 19:08:12 NTW-TPC-NWB-001 nw[3549]: [Engine] [warning] Module broker failed to load: Diagnostic information: Throw in function static void nw::LanguageManager::loadLanguageExtensions(const string&, nw::LanguagePtr)Dynamic exception type: nw::Exceptionstd::exception::what: Language key handle in file '/etc/netwitness/ng/index-broker-custom.xml' has undefined format[boost::errinfo_at_line_*] = 523

 

Issuing the command NwConsole -c login localhost:50003 -c /sys/stats ls | grep service.status on the appliance reports the following message:  66:0x2000000000200200 /sys/stats/service.status (Service Status) = Initialization Error

snap2.png


Cause

This issue occurs because one or more meta key entries in the index-broker-custom.xml file does not have a format defined.


Resolution

In order to resolve the issue, examine the file that was reported in the error message (in this case being the index-broker-custom.xml file) for meta key entries that do not have a format defined, and add the attribute accordingly.

Once all meta key entries have a defined format, save the file and restart the nwbroker service via the command line or through the Security Analytics / NetWitness UI, which will allow the Broker to initialize successfully.

If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.


Internal Comments

UserName:shurtj
8/22/2014 9:34:27 PM - Work in Progress
Currently authoring the article.

UserName:shurtj
8/25/2014 2:06:41 PM - Submitted Article
Completed article and submitted it for technical review.

Product Details

RSA Product Set: Security Analytics, NetWitness Logs & Network
RSA Product/Service Type: Broker
RSA Version/Condition: 10.x 11.x
Platform: CentOS
O/S Version: EL6, EL7

Approval Reviewer Queue

Technical approval queue