000039000 - RSA NetWitness Log Collector ODBC test connection failing

Document created by RSA Customer Support Employee on Jun 26, 2020
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000039000
Applies ToRSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Core Appliance
RSA Version/Condition: 11.X
Platform: CentOS
O/S Version: 7
 
IssueWhen ODBC test connection checked using How to test an ODBC connection from a Log Collector in RSA Security Analytics / NetWitness Platform. Below error throws.

Error! An error occurred creating an ODBC connection for DSN: DBname The trapped error is: Unable to create an ODBC connection. DSN: DBname; username: odbcuser; reason: state: 103; error-code: 0; description: [RSA][ODBC 20101 driver]252
CauseThis issue is due to Installation directory details missing in odbc.ini file.
Resolution
Please follow the below steps to resolve the issue.
  1. Login tp putty of Log Collecotr and Stop Log Collector service using the below command.
    systemctl stop nwlogcollector.service
     
  2. Take a backup of the existing /etc/netwitness/ng/odbc.ini file.
    cp /etc/netwitness/ng/odbc.ini /root/odbc.ini
     
  3. Edit /etc/netwitness/ng/odbc.ini file to include the below section.
    [ODBC]
    InstallDir=/opt/netwitness/odbc


    sample file contents:

    [ODBC]
    InstallDir=/opt/netwitness/odbc

    [MFA_SIEM]
    Database=DBname
    PortNumber=1433
    HostName=10.10.10.10
    Driver=/opt/netwitness/odbc/lib/R3mysql27.so

  4. Start Log Collector service and verify test connection.systemctl start nwlogcollector.service

Attachments

    Outcomes