000012274 - 'Aggregation call does not support nice' error on RSA Security Analytics 10.3 SP2 brokers

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000012274
Applies ToRSA Security Analytics
RSA Security Analytics 10.3.2
RSA Security Analytics Broker
Issue"Aggregation call does not support nice" error on RSA Security Analytics 10.3 SP2 brokers.
Error message:  Aggregation call does not support nice.. Device aggregation is being stopped.

A defect has been identified in the 10.3.2 (10.3 SP2) RSA Security Analytics Broker component for Brokers that aggregate (i.e. are "connected" to) another Broker.  These Aggregating Brokers may also be called Top Level Brokers.

Aggregating Brokers that have been upgraded to 10.3.2 may see an error similar to the following:

Failed to download device '<broker ip address>:50003' because Aggregation call does not support nice.. Device aggregation is being stopped

Resolution

If you are having this issue after upgrading both your top-level and mid-level brokers to Security Analytics 10.3 SP2 then you will need to download and apply the RSA_SA_b2478_HF_SAENG-1033.gz hotfix, following the steps below.

  1. Stop the nwbroker service.
  2. Unzip the hotfix file (RSA_SA_b2478_HF_SAENG-1033.gz) on the appliance.
  3. Backup the current /usr/sbin/NwBroker file.
  4. Copy the new NwBroker file contained in the compressed hotfix file to the /usr/sbin directory.
  5. Restart the nwbroker service.

 

If you are unable to apply the hotfix mentioned above, you may perform one of the following workarounds as an alternative:

  • Downgrade the mid-level broker to 10.3.1
  • Have the top-level broker point directly to the concentrators to bypass the mid-level broker

 

This issue has been permanently resolved in Security Analytics 10.3 SP3.

NotesFor additional information on the hotfix, refer to the SAENG-1033 ReadMe file.
Legacy Article IDa64666

Attachments

    Outcomes