000033303 - Syslog alerts are not creating RSA Archer SecOps Incidents in version 1.1

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000033303
Applies ToRSA Product Set: Security Management
RSA Product/Service Type: SecOps
RSA Version/Condition: 1.1
Platform: Windows
 
IssueSecurity Incidents are not being created in RSA Archer.
Cause
Jun 8, 2016 2:23:28 PM com.rsa.connector.framework-ACS
SEVERE: esa - Error occured while handling incoming data
org.apache.felix.log.LogException: com.rsa.connector.framework.components.datastore.archer.exception.ArcherComunicationException: javax.xml.ws.WebServiceException: org.apache.cxf.service.factory.ServiceConstructionException: Failed to create service.
at com.rsa.connector.framework.components.datastore.archer.ArcherWSHelper.login(ArcherWSHelper.java:506)
at com.rsa.connector.framework.components.datastore.archer.ArcherWSHelper.getSessionToken(ArcherWSHelper.java:483)
at com.rsa.connector.framework.components.datastore.archer.ArcherWSHelper.callArcher(ArcherWSHelper.java:397)
at com.rsa.connector.framework.components.datastore.archer.ArcherDataStore.findApplicationID(ArcherDataStore.java:1299)
at com.rsa.connector.framework.components.datastore.archer.ArcherDataStore.putData(ArcherDataStore.java:441)
at com.rsa.connector.framework.components.datastore.archer.ArcherDataStore.handleData(ArcherDataStore.java:386)
at com.rsa.connector.plugin.soc.SOCManagementService.onApplicationDataReceived(SOCManagementService.java:67)
at com.rsa.connector.plugin.service.AbstractRsaConnectorService.processDataHandlingRequest(AbstractRsaConnectorService.java:99)
at com.rsa.connector.framework.plugin.ApplicationRequestHandler.execute(ApplicationRequestHandler.java:177)
at com.rsa.connector.framework.plugin.ApplicationRequestHandler.access$400(ApplicationRequestHandler.java:30)
at com.rsa.connector.framework.plugin.ApplicationRequestHandler$QueueWorker.run(ApplicationRequestHandler.java:249)
Caused by: org.apache.felix.log.LogException: javax.xml.ws.WebServiceException: org.apache.cxf.service.factory.ServiceConstructionException: Failed to create service.
at org.apache.cxf.jaxws.ServiceImpl.<init>(ServiceImpl.java:152)
at org.apache.cxf.jaxws.spi.ProviderImpl.createServiceDelegate(ProviderImpl.java:63)
at javax.xml.ws.Service.<init>(Service.java:36)
at javax.xml.ws.Service.create(Service.java:116)
at com.rsa.connector.framework.components.jaxws.JaxWSClientBase.createProxy(JaxWSClientBase.java:80)
at com.rsa.connector.framework.components.jaxws.JaxWSClientBase.createProxy(JaxWSClientBase.java:115)
at com.rsa.connector.framework.components.datastore.archer.ws.ArcherGeneralClient.<init>(ArcherGeneralClient.java:49)
at com.rsa.connector.framework.components.datastore.archer.ws.ArcherGeneralClient.<init>(ArcherGeneralClient.java:25)
at com.rsa.connector.framework.components.datastore.archer.ArcherWSHelper.getArcherGeneralClient(ArcherWSHelper.java:570)
at com.rsa.connector.framework.components.datastore.archer.ArcherWSHelper.login(ArcherWSHelper.java:499)
... 10 more
Caused by: org.apache.felix.log.LogException: org.apache.cxf.service.factory.ServiceConstructionException: Failed to create service.
at org.apache.cxf.wsdl11.WSDLServiceFactory.<init>(WSDLServiceFactory.java:93)
at org.apache.cxf.jaxws.ServiceImpl.initializePorts(ServiceImpl.java:207)
at org.apache.cxf.jaxws.ServiceImpl.<init>(ServiceImpl.java:150)
... 19 more
Caused by: org.apache.felix.log.LogException: javax.wsdl.WSDLException: WSDLException: faultCode=PARSER_ERROR: Problem parsing 'http://localhost:80//ws/general.asmx?wsdl'.: java.io.FileNotFoundException: http://localhost:80//ws/general.asmx?wsdl
at com.ibm.wsdl.xml.WSDLReaderImpl.getDocument(Unknown Source)
at com.ibm.wsdl.xml.WSDLReaderImpl.readWSDL(Unknown Source)
at com.ibm.wsdl.xml.WSDLReaderImpl.readWSDL(Unknown Source)
at org.apache.cxf.wsdl11.WSDLManagerImpl.loadDefinition(WSDLManagerImpl.java:232)
at org.apache.cxf.wsdl11.WSDLManagerImpl.getDefinition(WSDLManagerImpl.java:179)
at org.apache.cxf.wsdl11.WSDLServiceFactory.<init>(WSDLServiceFactory.java:91)
... 21 more
Caused by: java.io.FileNotFoundException: http://localhost:80//ws/general.asmx?wsdl
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1168)
at com.sun.org.apache.xerces.internal.impl.XMLEntityManager.setupCurrentEntity(XMLEntityManager.java:973)
at com.sun.org.apache.xerces.internal.impl.XMLVersionDetector.determineDocVersion(XMLVersionDetector.java:184)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:798)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:764)
at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:148)
at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:250)
at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:292)
... 27 more

 
ResolutionRe-configured ESA application by running the ESA configuration Wizard
1.  Log into RSA Connector Shell
2.  Run-script "Install_Dir\EMC\RSA ConnectorFramework\plugins\secops\esa_create_app.rcf"
3.  Fill in pertinent configuration information for the end point
 

Attachments

    Outcomes