000037176 - Running nwsetup-tui script fails with 'host not found in orchestration-server database' in RSA NetWitness 11.x.

Document created by RSA Customer Support Employee on Feb 15, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037176
Applies ToRSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: Admin Server
RSA Version/Condition: 11.1.x, 11.2.x
Platform: CentOS
O/S Version: 7
 
IssueRunning nwsetup-tui to complete the upgrade to a higher 11.x version fails on a NetWitness Admin Server.

The following error is noticed in var/log/netwitness/orchestration-client/orchestration-client.log.
 

2019-01-11 00:13:47,071 [ main] ERROR c.r.n.i.c.c.OrchestrationApplication|Exception processing request
java.lang.IllegalArgumentException: x.x.x.x - host not found in orchestration-server database

Note: x.x.x.x is the IP address of the Admin Server.

The issue occurs even when the correct IP and hostname for the Admin Server exist in /etc/hosts.

From running the following commands, it is noticed that the Admin Server's hostname and displayName appear as "localhost" instead of the IP address and the display name.


mongo admin -u deploy_admin -p netwitness
use orchestration-server
db.host.find()

Note: replace netwitness with the current password for deploy_admin.

Example output.

[root@AdminServer ~]# mongo admin -u deploy_admin -p netwitness
MongoDB shell version v3.6.4
connecting to: mongodb://127.0.0.1:27017/admin
MongoDB server version: 3.6.4
> use orchestration-server
switched to db orchestration-server
> db.host.find()
{ "_id" : "307fb2d3-f4b7-4940-8b9d-xxxxxxxxxxxx", "_class" : "com.rsa.asoc.orchestration.host.HostEntity", "hostname" : "localhost", "displayName" : "localhost", "version" : { "major" : 11, "minor" : 2, "servicePack" : 1, "patch" : 0, "snapshot" : false, "rawVersion" : "11.2.1.0" }, "thirdParty" : false, "installedServices" : [ "AdminServer", "investigate-server" ], "meta" : { "node-zero" : true } }




 
CauseAs the Admin Server is referred as "localhost" in the orchestration-server database, nwsetup-tui script fails to find the right entry using the IP address.
ResolutionIn order to resolve the issue, update the orchestration-server database using the following command.
 

mongo admin -u deploy_admin -p netwitness # Replace netwitenss with the current password of deploy_admin.
use orchestration-server
db.host.find() # Note the node ID for the Admin Server.
db.host.update({"_id" : "307fb2d3-f4b7-4940-8b9d-xxxxxxxxxxxx"}, { $set: {"hostname": "x.x.x.x"}}) # Replace the ID with the one found above. Replace x.x.x.x with the IP address of the Admin Server
db.host.update({"_id" : "307fb2d3-f4b7-4940-8b9d-xxxxxxxxxxxx"}, { $set: {"displayName": "AdminServer"}}) # Replace AdminServer with the desired display name for the Admin Server.
db.host.find({"_id" : "307fb2d3-f4b7-4940-8b9d-xxxxxxxxxxxx"}).pretty() # Confirm the changes are correctly applied.


Run nwsetup-tui to confirm the remaining upgrade process completes successfully.

Attachments

    Outcomes