000029129 - A rule in an RSA Security Analytics report displays the message "Waiting to be loaded" indefinitely

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000029129
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Reporting Engine
RSA Version/Condition: 10.4.x
Platform: CentOS
O/S Version: 6
IssueWhen running and viewing a report within the Reports module in RSA Security Analytics 10.4.x,  one or more rules display the message "Waiting to be loaded" as shown in the screenshot below.
Screenshot of the message in the report.
The status never changes even after being displayed for long periods of time.
The /home/rsasoc/rsa/soc/reporting-engine/logs/reporting-engine.log file reports errors similar to the example below.

2014-10-26 23:34:12,870 [GetListValueRequest_15555] ERROR com.rsa.soc.re.ce.command.GetListValueCommand - Error processing command 
com.rsa.soc.re.exception.ReportingException: Action READ is not authorized on resource SA-LIST-ITEM
at com.rsa.soc.re.contentstore.impl.StorePermissionUtils.checkReadPermission(StorePermissionUtils.java:112)
at com.rsa.soc.re.contentstore.impl.ListStore.getListValues(ListStore.java:443)
at com.rsa.soc.re.contentstore.impl.ReportingContentStoreImpl.getListValues(ReportingContentStoreImpl.java:786)
at com.rsa.soc.re.ce.command.GetListValueCommand.execute(GetListValueCommand.java:41)
at com.rsa.soc.re.ce.server.ReportEngineController.process(ReportEngineController.java:54)
at com.rsa.soc.re.ce.server.ReportingEngineService.onRequest(ReportingEngineService.java:65)
at com.rsa.soc.re.ce.server.ReportingEngineService.onRequest(ReportingEngineService.java:26)
at com.rsa.netwitness.carlos.transport.spi.AbstractMessageChannel$5.run(AbstractMessageChannel.java:624)
at com.rsa.netwitness.carlos.common.SharedThreadPoolExecutor$TagExclusiveRunnable.run(SharedThreadPoolExecutor.java:93)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)
Caused by: com.rsa.soc.re.exception.ReportingException: Action is not authorized on resource
at com.rsa.soc.re.authorization.AuthorizationUtil.checkPermission(AuthorizationUtil.java:165)
at com.rsa.soc.re.authorization.AuthorizationUtil.checkReadPermission(AuthorizationUtil.java:180)
at com.rsa.soc.re.contentstore.impl.StorePermissionUtils.checkReadPermission(StorePermissionUtils.java:102)
... 11 more
2014-10-26 23:34:12,879 [GetListValueRequest_15557] ERROR com.rsa.soc.re.authorization.AuthorizationUtil - Action is not authorized on resource



 
CauseThis issue occurs because the user does not have sufficient permissions for one more components (i.e. rules, lists, etc.) in the report.
The component in question will be reported in the error message shown above.  (In the above example, the component in question is entitled SA-LIST-ITEM.)
ResolutionIn order to resolve the issue, a user that already has read/write permissions for the component in question will need to provide read (or read/write) permissions for the role to which the other user belongs.
NotesFor additional information on setting permissions on Reporting Engine components, refer to the knowledgebase article Users in other roles cannot see scheduled reports in RSA Security Analytics 10.3.

Attachments

    Outcomes