|Applies To||RSA Product Set: RSA Security Analytics|
RSA Product/Service Type: RSA Security Analytics Reporting Engine
RSA Version/Condition: 10.3.x, 10.4.x
|Issue||In some cases you may find that all reports have disappeared from the Reporting Engine. However, it is possible to search for a report through the search box. |
|Cause||The Reporting Engine fails to enumerate reports because of a missing rule.|
As it can be seen in the reporting engine log it fails on GetReportMetaAndStatsAsFlatListRequest :
2015-01-19 11:24:07,720 [GetReportMetaAndStatsAsFlatListRequest_2582] ERROR com.rsa.soc.re.contentstore.jcr.JCRContentStore - RULE with id= RULE_11_20141211105353 not found in repository
|Workaround||1. Please use below URL in the browser to identify the report id and name which is using this missing rule. Use the RULE_ID shown in the reporting engine error message:|
It gives a JSON output with a list of dependent reports:
2. Navigate to the Reports -> Manage -> Reports and in the search box enter the name of a report identified in the step 1.
Click on the report to edit it.
3. It is not possible to delete a report from the edit screen but it is possible to remove a missing rule from a report.
If this is the only rule on the report you will not be able to save it without at least one rule linked. To workaround this please replace the absent rule with any existing rule and save the report.
Repeat the steps 2 and 3 for each dependent report identified in the step 1.