000038532 - How to fix RSA NetWitness Endpoint alerts could not display middle pane in hosts-details page

RSA NetWitness Endpoint alerts could not display middle pane in the INVESTIGATE-Hosts-Details page after removing the Endpoint hybrid from Admin node, then re-image and add the endpoint hybrid.

Cause: The uuid of the concentrator is changed, but new uuid is not updated properly.

To fix this issue, 

1. Get the investigate-service-id:
   

       a) Go to ADMIN > Concentrator service.
       b) Click gear button > View > Explore tab.
       c) Expand the sys/stats node list.
       d) In the UUID filed, copy the value.

   
   
2. Update the investigate-service-de:
       a) Go to ADMIN > Endpoint Server service.
       b) Click gear button > View > Explore tab.
       c) In the endpoint/investigate field, specify the investigate-service-id.
3. Restart the ESA server.
4. Restart respond-server service on the admin node.
       systemctl stop rsa-nw-respond-server.service
       systemctl start rsa-nw-respond-server.service
       systemctl status rsa-nw-respond-server.service
    
5. 5. Select hosts at Investigate-Host page, then perform 'Reset risk score'