000030140 - All reports disappear from the Reporting Engine UI

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000030140
Applies ToRSA Product Set: RSA Security Analytics
RSA Product/Service Type: RSA Security Analytics Reporting Engine
RSA Version/Condition: 10.3.x, 10.4.x
IssueIn some cases you may find that all reports have disappeared from the Reporting Engine. However, it is possible to search for a report through the search box. 
User-added image

CauseThe Reporting Engine fails to enumerate reports because of a missing rule.
As it can be seen in the reporting engine log it fails on GetReportMetaAndStatsAsFlatListRequest :

2015-01-19 11:24:07,720 [GetReportMetaAndStatsAsFlatListRequest_2582] ERROR com.rsa.soc.re.contentstore.jcr.JCRContentStore - RULE  with id= RULE_11_20141211105353  not found in repository
2015-01-19 11:24:07,720 [GetReportMetaAndStatsAsFlatListRequest_2582] ERROR com.rsa.soc.re.contentstore.impl.RuleStore - Failed to find rule with id  RULE_11_20141211105353
2015-01-19 11:24:07,720 [GetReportMetaAndStatsAsFlatListRequest_2582] ERROR com.rsa.soc.re.ce.server.ReportEngineController - ReportingEngine unable to handle incoming request : messageType= GetReportMetaAndStatsAsFlatListRequest message=type: GetReportMetaAndStatsAsFlatListRequest
get_report_meta_and_stats_as_flat_list_request {

Workaround1. Please use below URL in the browser to identify the report id and name which is using this missing rule. Use the RULE_ID shown in the reporting engine error message:
For example:

It gives a JSON output with a list of dependent reports:

    "message": null,
    "object": null,
    "success": true,
    "data": [{
        "entityType": "REPORT",
        "entityId": "REPORT_1_20150203183652",
        "name": "test",
        "path": "test"
        "entityType": "REPORT",
        "entityId": "REPORT_2_20150205115628",
        "name": "AllDevices",
        "path": "AllDevices"
    "total": 0


2. Navigate to the Reports -> Manage  -> Reports and in the search box enter the name of a report identified in the step 1.
Click on the report to edit it. 
3. It is not possible to delete a report from the edit screen but it is possible to remove a missing rule from a report.
If this is the only rule on the report you will not be able to save it without at least one rule linked. To workaround this please replace the absent rule with any existing rule and save the report.
Repeat the steps 2 and 3 for each dependent report identified in the step 1.