000030386 - Live deployment of Reporting Engine rules and reports fail due to missing dependencies in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000030386
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Reporting Engine, Live
RSA Version/Condition: 10.2.x, 10.3.x, 10.4.x, 10.5
Platform: CentOS
IssueDeploying rules or reports for the Reporting Engine from RSA Live fail due to missing dependencies.  In other situations, the rules and reports deploy successfully but will not execute properly.
Some of the affected rules and reports are listed below.
  • Accounts Created
  • Accounts Modified
  • Group Management
  • Encryption Failures
  • Account Management
  • Accounts Disabled
The /home/rsasoc/rsa/soc/reporting-engine/logs/reporting-engine.log file reports errors similar to the follow:
 
"2014-01-20T14:23:04" "ERROR" "com.rsa.smc.sa.live.job.DeploymentTask" "Live Task Deployment 474726311" "Failed to deploy live resource file: Accounts%20Created UUID: ee4125d9-21e3-4f9a-9434-693078b81351 to device: RE
java.lang.Exception: import_status: FAIL_OTHERS
at com.rsa.smc.sa.live.factory.deployment.REDeploymentHandler.pushReResource(REDeploymentHandler.java:66)
at com.rsa.smc.sa.live.factory.deployment.REDeploymentHandler.pushResource(REDeploymentHandler.java:47)
at com.rsa.smc.sa.live.job.DeploymentTask.deploy(DeploymentTask.java:123)
at com.rsa.smc.sa.live.job.DeploymentTask.call(DeploymentTask.java:95)
at com.rsa.smc.sa.live.job.DeploymentTask.call(DeploymentTask.java:30)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:722)"
WorkaroundIn order to resolve the issue, first retry the deployment.  If the issue persists, deploy the dependent rules and/or lists first, and then deploy the rules and/or reports.

Attachments

    Outcomes