UUIDs are displayed instead of the service names in RSA Security Analytics Heanth & Wellness

Issue

After upgrading Security Analytics server to 10.6.1 or 10.5.1/10.5.2, the Alarms tab in Health & Wellness shows UUIDs instead of hostnames.
It is also noticed that Health & Wellness intermittently stops generating alarms.

sms.log contains errors like below.

 [Carlos@3d13d096-15(run(QueryAlarmsRequest))(gsocsvc)] ERROR com.rsa.netwitness.sms.core.repository.ASGCarlosRepository - com.rsa.netwitness.carlos.transport.TransportException: com.rsa.netwitness.carlos.transport.TransportException: com.rabbitmq.client.AlreadyClosedException: connection is already closed due to connection error; protocol method: #method<connection.close>(reply-code=501, reply-text=FRAME_ERROR - type 2, all octets = <<>>: {frame_too_large,132572,131064}, class-id=0, method-id=0)
 
com.rsa.netwitness.carlos.transport.TransportException: com.rsa.netwitness.carlos.transport.TransportException: com.rsa.netwitness.carlos.transport.TransportException: com.rabbitmq.client.AlreadyClosedException: connection is already closed due to connection error; protocol method: #method<connection.close>(reply-code=501, reply-text=FRAME_ERROR - type 2, all octets = <<>>: {frame_too_large,132572,131064}, class-id=0, method-id=0)

Cause

The issues are caused by a known bug with carlos connection.

Workaround

Resolution

In order to resolve the issue, please upgrade the SA server to 10.6.1.1 or 10.5.3.
Please note that 10.5.3 is yet to be released.

Product Details

RSA Product Set: Security Analytics
RSA Product/Service Type: SA Security Analytics UI
RSA Version/Condition: 10.6.1.0, 10.5.1, 10.5.2.
Platform: CentOS
Platform (Other): Health and Wellness
O/S Version: 6

Approval Reviewer Queue

ASOC Approval Group