000029530 - Default context menus are not displayed in RSA Security Analytics 10.4 investigations

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000029530
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics UI, Security Analytics Server
RSA Version/Condition: 10.4.x
Platform: CentOS
O/S Version: EL6
IssueContext Menu files can get corrupted if they are copied from Windows to Linux due to Carriage Return characters being inserted at the end of each line in the files.
The error message "Error Loading Plugins" can be seen in the /var/lib/netwitness/uax/logs/sa.log file in these circumstances.
ResolutionTo resolve the issue, follow the steps below.
  1. Connect to the Security Analytics server via SSH as the root user.
  2. Backup and move all context files from the locations below, except for the file "contextMenuConfiguration.cfg" which is under /var/lib/netwitness/uax/conf.
    • /var/lib/netwitness/uax/plugins/context-actions/events
    • /var/lib/netwitness/uax/conf
    • /var/lib/netwitness/uax/plugins/context-actions/events
    • /var/lib/netwitness/uax/plugins/context-actions/investigation
    • /var/lib/netwitness/uax/plugins/context-actions/live
  3. Stop the jettysrv service with the following command:  stop jettysrv
  4. Restart the jettysrv service with the following command:  start jettysrv
After the jetty web server has fully initialized, you should now see all default context menu config files regenerated under above directories and that the plugins are all loaded successfully under Administration > System > Plugins within the Security Analytics UI.
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article number for further assistance.