Windows Legacy Collector does not work after update to RSA Security Analytics 10.6.1
Issue
Windows Legacy Collection does not work after update to 10.6.1
Cause
- After upgrade from 10.6.0 to 10.6.1 the directory "C:\NetWitness\ng\logcollector\rabbitmq\mnesia\LogCollection@localhost-Plugins-expand" may be missing on the Windows Legacy Collector server:
Resolution
- Uninstall the current 10.6.1 package from the windows legacy collector.- Remove the WLC from Netwitness UI.
- Install 10.5.2 windows legacy collector package then install on the top of it 10.6.1
- Add the WLC to the Netwitness UI and recreate the lockbox password .
Internal Comments
Archive it
Product Details
RSA Product Set: Security AnalyticsRSA Product/Service Type: SA Security Analytics Server
RSA Version/Condition: 10.6.1.0
Platform: CentOS
O/S Version: 6.1
Approval Reviewer Queue
Technical approval queue