000031334 - ESA Alerts Summary page is blank or displays "Error getting data" in the RSA Security Analytics UI

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000031334
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Event Stream Analysis (ESA), Security Analytics UI
RSA Version/Condition: 10.4.x, 10.5.x
Platform: CentOS
Platform (Other): MongoDB
O/S Version: EL6
IssueWhen navigating to the Alerts -> Summary page in the Security Analytics UI, the error message "Error getting data" is displayed.
User-added image
The Alerts Summary page may also simply be blank with no data being displayed, as shown below.
User-added image
CauseThis issue occurs when the MongoDB database that stores the ESA alerts becomes too large.
WorkaroundIn order to reduce the size of the ESA alerts database and keep it at a manageable level, you must enable automated ESA storage maintenance as documented in the Security Analytics 10.5 User Guide.
NotesFor additional information regarding the ESA storage maintenance feature in Security Analytics 10.4, refer to the article entitled How to configure automated ESA storage maintenance in RSA Security Analytics 10.4.