|Applies To||RSA Product Set: NetWitness Endpoint formerly ECAT|
RSA Product/Service Type: NetWitness Endpoint
RSA Version/Condition: 4.4.x
|Issue||Not all NetWitness Endpoint Agent machines are showing in the NWE UI, Machines.|
The ConsoleServer-Error.log file (default directory, C:\Program Files\RSA\ECAT\Server\) shows license error, "You have reached the agent count limit".
|Cause||The NetWitness Endpoint Agent license limit has been exceeded.|
The NWE UI, Machines, will only display the first Agents that were added to the SQL Server database, up to the license limit.
|Resolution||Purchase and install on the Endpoint Server a new license file for more Agents, the server will then allow more to be shown in the NWE UI, Machines.|
Contact RSA Sales for the purchase of a new license.
Note: The new Endpoint license file replaces the existing license file on the Endpoint Server, and will be for the new higher total number of Agents.
|Workaround||Delete NetWitness Endpoint Agent software until you are equal, or below the Endpoint Agent license limit.|
Via the NWE UI, Machines.
You can choose an individual machine, or use Shift or Control to highlight multiple machines, right-click, and choose, Agent Maintenance > Uninstall Agent.
The next dialog box shows all selected machines.
Confirm that the selection is correct, and click “Proceed” to uninstall the Endpoint Agent from all.
After uninstalling the Endpoint Agent this does not remove the machine from the NWE UI, Machines, or from the Endpoint SQL Server database.
To remove the machine from Endpoint, and to free up a license you must select one or more Machines again, right-click, and choose, Advanced > Remove Selection from the Database.
Press [F5] to Refresh the Machines screen, and confirm one or more Machines are deleted.
Reference: RSA NetWitness Endpoint 4.4 User Guide, see the Section for "Uninstall Agents and Remove Agents from the Database".
Only machines showing in the NWE UI, Machines, can be deleted using this method.
|Notes||More licensing information:|