000033775 - After upgrading to Security Analytics 10.6.1 Event Streams Analysis (ESA) does not successfully test connection when a data source is saved

Document created by RSA Customer Support Employee on Aug 25, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000033775
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: SA Security Analytics Server, Event Streams Analysis
RSA Version/Condition:,, 10.6.1
IssueWhen you add and save an ESA data source (concentrator) the test connection fails.
In /var/log/messages you will see:
005 received error: Invalid username or password

CauseThere is a minor defect in the code RSA is aware of.
ResolutionESA correlation rules will still work and the first time setting up the data source the test connection will be successful. You can ignore a test connection failure on a saved data source in ESA when your correlation rules are working.
This will be resolved in the RSA Security Analytics release.