Unable to restore ContextHub data using recovery tool on RSA NetWitness Platform 11.5.x.x or below

Cause

The nw-recovery-tool or nw-failover tool fails to restore contexthub-server data.

Resolution

Note: These steps are applicable only if the nw-recovery-tool is successful in restore mode for both the Admin server and ESA.
To restore contexthub-server database on ESA and Admin server, perform the following:
 

1. SSH to the ESA server and stop the contexthub-server by running the following command:
   service rsa-nw-contexthub-server stop
2. SSH to the Admin server.
3. Run the following command on the existing contexthub-server database: 
   mongo -u deploy_admin -p <deploy_admin password> --authenticationDatabase admin contexthub-server --eval "printjson(db.dropDatabase())"
        Replace with your password.
    
4. Navigate to the mongo backup location:
   cd /var/netwitness/backup/mongo
5. Run the following command to restore the Context Hub database:
   mongorestore --verbose --gzip -u deploy_admin -p <deploy_admin password> --db contexthub-server --authenticationDatabase admin contexthub-server
        Replace with your password.
    
6. SSH to the ESA server and start the contexthub-server:
   service rsa-nw-contexthub-server start

Product Details

NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type:  Context Hub service
NetWitness Version/Condition: 11.5 and earlier
Platform: CentOS 7

Summary

Unable to restore contexthub data as the nw-recovery tool fails.

Approval Reviewer Queue

Technical approval queue