Skip to content
  • There are no suggestions because the search field is empty.

Upgrade to RSA NetWitness 11.4.1 failed caused by salt-api errors

Issue

Upgrade from 11.3.2 to 11.4.1 fails because it cannot start salt-api service.
Salt-api service was failing and showing the following error: 
● salt-api.service - The Salt API

   Loaded: loaded (/usr/lib/systemd/system/salt-api.service; enabled; vendor preset: disabled)

  Drop-In: /etc/systemd/system/salt-api.service.d

           └─salt-api-opts-managed.conf

   Active: active (running) since Thu 2020-04-30 19:16:31 UTC; 5s ago

     Docs: man:salt-api(1)

           file:///usr/share/doc/salt/html/contents.html

           https://docs.saltstack.com/en/latest/contents.html

Main PID: 59372 (salt-api)

   CGroup: /system.slice/salt-api.service

           └─59372 /usr/bin/python /usr/bin/salt-api

 

systemd[1]: Starting The Salt API...

systemd[1]: Started The Salt API.

salt-api[59372]: [INFO    ] Setting up the Salt API

salt-api[59372]: [INFO    ] The salt-api is starting up

salt-api[59372]: [ERROR   ] Not loading 'salt.loaded.int.netapi.rest_cherrypy'. Error loading CherryPy: cannot import name md5

salt-api[59372]: [ERROR   ] Did not find any netapi configurations, nothing to start



Cause

The error is caused by corrupted python-libs package. Reinstalling the package resolves this issue.


Resolution

  1. Check salt-api status.
    systemctl status salt-api -l
  2. Check salt-api logs
    tail -f /var/log/salt/api
  3. Restart the salt-api service
    systemctl restart salt-api -l
  4. Make sure that 11.4.0.0 and 11.4.1.0 repo are present in /var/netwitness/common/repo
    du -sh /var/netwitness/common/repo/*
  5. Go to repo and check base repo url
    cd /etc/yum.repos.d
    grep baseurl *repo
  6. Make sure that repo is pointing to the proper location.
    echo https://nw-node-zero/nwrpmrepo > /etc/netwitness/platform/repobase
  7. Go to /var/netwitness/common/repo/11.4.0.0/OS directory and reinstall python-libs-2.7.5-86.el7.x86_64
    cd /var/netwitness/common/repo/11.4.0.0/OS
    yum reinstall python-libs-2.7.5-86.el7.x86_64.rpm
  8. Start salt-api service
    service salt-api start
  9. Perform manual update
    upgrade-cli-client –-upgrade --host-addr <IP of Netwitness Server> --version 11.4.1.0

Product Details

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Core Appliance
RSA Version/Condition: 11.3.x and 11.4.x

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue