000017661 - All fault lights are active for all drives on a RSA NetWitness Platform DAC

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Sep 26, 2019
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000017661
Applies To
RSA Product Set: Security Analytics, RSA NetWitness Logs & Network
   RSA Product/Service Type: VNX Direct Attached Capacity (DAC) 
IssueAll fault lights are active for all drives on an RSA NetWitness Logs and Network DAC.

Every disk drive on a NetWitness Logs and Network Direct Attached Capacity (DAC) unit have an active amber fault light indicating a disk failure, as shown in the image below.


The VNX DACs will always have all fault lights active at all times. This is because the intelligence that runs the DACs are in the VNX head units. As NetWitness Logs and Network uses the DACs as JBODs, there is nothing controlling the fault lights.  Therefore, the lights do not indicate anything problematic and can be safely ignored.

As the fault lights cannot be used to monitor for failed drives, users are encouraged to instead use methods such as viewing the Stats page for the devices in the Security Analytics UI, using the nwraidutil script (refer to the knowledgebase article How to Download and Use the RSA NetWitness RAID Utility), running REST queries against the appliance service, and/or using SNMP traps.

Legacy Article IDa67470