|Applies To||RSA Product Set: NetWitness Endpoint|
RSA Product/Service Type: NetWitness Endpoint
RSA Version/Condition: 18.104.22.168
|Issue||A NWE multiserver environment with secondary servers is having flapping issues with the connectivity of online/offline machines where the machine on a secondary server suddenly goes offline when attempting to start a scan. Hitting refresh in the machines window eventually see's the machine return online.|
It is impacted when a secondary server is decommissioned or otherwise changed within the environment.
|Cause||The cause of this issue is a bug in the MSSQL view job that causes the machine to incorrectly appear offline in both the machines view and the individual machine window.|
|Resolution||The permanent resolution to this issue is to upgrade to 22.214.171.124 where the bug fix is incorporated for this issue or upgrade to the 11.3+ version of Netwitness Log Hybrid.|
|Workaround||Clearing the cache on the UI or waiting for the machine to return online will show the machine as online again, but will not prevent it from going offline with a scan. Only upgrading to a fix version will prevent this issue.|