|Applies To||RSA Product Set: Security Analytics|
RSA Product/Service Type: NetWitness Core Appliance, Warehouse Connector
RSA Version/Condition: 10.x
O/S Version: 6
|Issue||In some circumstances, the Warehouse Connector Stream will not start, and status shows as stopped as in the below screenshot:|
Starting the stream manually results in the below error in the NetWitness GUI:
Failed to execute: start: Failed to process message start for /warehouseconnector/streams/Saw com.rsa.netwitness.carlos.transport.TransportException: Subscription Failed : Connection Failure Invalid username or password, Check the warehouseconnector service logs for detailed information.
The /var/log/messages file has the below error:
Error: Connection Failure Invalid username or password, Fix the problem in the source and restart the stream.
|Cause||This issue occurs due to connectivity issues with data sources after a change of either the lockbox password, or login credentials to the service.|
|Resolution||There are two methods of resolution available to fix this issue.|
Run the following command against the old NwWarehouseconnector.cfg file.
cat /etc/netwitness/ng/NwWarehouseconnector.cfg|grep session
<config getRoles="users.manage" instance="config" maxLength="255" name="session.threshold" prettyName="Session Threshold" setRoles="users.manage" value="0"/>
<config getRoles="warehouseconnector.manage" instance="config" maxLength="255" name="lastsessionid.present" prettyName="Last SessionID present" setRoles="" value="39687210696"/>
Method 2: This process helps to start Warehouse Connector stream when the GUI is not accessible or Stream is not getting removed from GUI.