000030745 - Exception System Error is displayed when attempting to perform a Malware Analysis investigation in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000030745
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Malware Analysis, Security Analytics UI
RSA Version/Condition: 10.4.x, 10.5.x
Platform: CentOS
O/S Version: 6
IssueAn Exception System Error page is displayed when navigating to the Investigation -> Malware Analysis page in the Security Analytics UI, which also displays the error message below.
org.springframework.web.util.NestedServletException: Request processing failed; nested exception is java.lang.NullPointerException

User-added image
CauseThis issue occurs when a default Malware Analysis service has not been configured in the Security Analytics UI.
WorkaroundTo resolve the issue, define a default Malware Analysis service by performing the steps below.
  1. In the Security Analytics UI, navigate to the Administration -> Services page.
  2. Click on the red Actions button for the Malware Analysis service that you wish to be the default, and select View -> Config.
  3. Take note of the device number listed in the URL for the Config page, as shown in the screenshot below.
    User-added image
  4. Navigate directly to the following URL, replacing <deviceNumber> with the number from Step 3:  https://<securityAnalyticsServer>/investigation/<deviceNumber>/malware
  5. On the Summary page that loads, click on the device name underneath the Summary of Events heading, as shown in the example below.
    User-added image
  6. Under the Malware Services section of the dialog box that appears, click on the service you wish to be the default and click on the Default Service button.
    User-added image
After making this change, you will be able to navigate to the Investigation -> Malware Analysis page without seeing the Exception System Error message.
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article number for further assistance.