000033594 - Reports are not copied to the network share configured in output action in RSA Security Analytics Reporting Engine

Document created by RSA Customer Support Employee on Aug 2, 2016Last modified by RSA Customer Support on May 6, 2019
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000033594
Applies ToRSA Product Set: Security Analytics, NetWitness Logs and Network
RSA Product/Service Type: Reporting Engine
RSA Version/Condition: 10.4.x, 10.5.x, 10.6.x, 11.X
Platform: CentOS
O/S Version: 6, 7
IssueReporting Engine has an output action configured to copy the report to a network share.
However, the reports do not appear in the network share even when the Report Status shows "COMPLETED".

CauseThis happens due to incorrect "Mounted Path" settings under the Network Share Configuration.
ResolutionNavigate to Administration -> Services -> Reporting Engine -> Config -> Output Actions
Under Network Share Configuration, note the mounted path and not the actual path to the network share.

Example: If the mounted share is \\\shared and the mounted path is /temp/share

Then the configuration should have /temp/share and NOT the actual share path.