|Applies To||RSA Product Set: NetWitness Logs & Network|
RSA Product/Service Type: Event Stream Analysis (ESA)
RSA Version/Condition: 10.6.x
|Issue||After rebuilding the ESA alert database on the ESA appliance, the tokumx service reports the following status:|
Once the /var/run/tokumx/tokumx.pid file is manually removed, the following status is reported:
|Cause||This issue occurs because the /opt/rsa/database directory and its contents were not created when the rsa-esa-server package was re-installed.|
|Resolution||In order to resolve the issue, follow the steps below.|
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article number for further assistance.