|Applies To||RSA Product Set: Security Analytics|
RSA Product/Service Type: Reporting Engine, Incident Management, Security Analytics UI, Security Analytics Server
RSA Version/Condition: 10.4.x, 10.5.x
Platform (Other): RabbitMQ
O/S Version: EL6
|Issue||When Incident Management is enabled, if RabbitMQ connections enter a blocked state, Reporting Engine alerts will fail and some threads will be blocked.|
|Workaround||In order to resolve the issue, Incident Management service can be stopped until the RabbitMQ connections switch back to a running state.|
To stop the Incident Management service, connect to the Security Analytics server via SSH and terminate the rsa-im service using the syntax.
[root@SA-Server ~]# service rsa-im stop
If you are unsure of any of the steps above, or experience any issues, contact RSA Support and quote this article number for further assistance.