|Applies To||RSA Product Set: Security Analytics|
RSA Product/Service Type: Security Analytics Sever, Reporting Engine, Security Analytics UI
RSA Version/Condition: 10.4.0.2
|Issue||When accessing rules by navigating to Reports -> Manage -> Rules, the Security Analytics UI displays the following message:|
No rules exist in the selected group
This occurs even though rules do exist. This can be tested by typing a rule name into the search bar as shown below.
The /var/lib/netwitness/uax/logs/sa.log file displays the error message below.
2015-09-30 01:06:47,728 [qtp819238905-57658] WARN org.atmosphere.cpr.AtmosphereResponse - Committed error code 500
|Cause||This issue occurs when the jetty service is unable to retrieve the rules from Reporting Engine.|
It can also occur when the jetty service hangs.
|Workaround||Follow the steps below to bring the rules back in the Security Analytics UI.|