000034114 - When trying to access "Reports" it says "Error while displaying chart" in RSA Security Analytics

Document created by RSA Customer Support Employee on Nov 1, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000034114
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: SA Security Analytics UI
RSA Version/Condition: 10.6.1.0
 
IssueAfter upgrading to RSA SA 10.6.1.0 some charts are no longer displayed.  This error will be thrown when you attempt to view the chart:
Error while displaying chart
In /var/lib/netwitness/uax/logs/sa.log exception is thrown:
 
INFO  com.rsa.smc.sa.reporter.jobs.ReporterChartPollingTask - Fetching data for chart [name_of_chart] 
[Reporting Status Polling ]
ERROR com.rsa.smc.sa.reporter.jobs.ReporterChartPollingTask - Index: 0
java.lang.IndexOutOfBoundsException: Index: 0
at java.util.Collections$EmptyList.get(Collections.java:4454)
at com.rsa.netwitness.carlos.reporting.ReportingServiceProtoRules$NWQuery.getOrderByKeys(ReportingServiceProtoRules.java:660)
at com.rsa.smc.sa.reporter.util.ChartDataUtils.getChartConfig(ChartDataUtils.java:102)
at com.rsa.smc.sa.reporter.jobs.ReporterChartPollingTask.getChartData(ReporterChartPollingTask.java:111)
at com.rsa.smc.sa.reporter.jobs.ReporterChartPollingTask.execute(ReporterChartPollingTask.java:57)
at com.rsa.smc.sa.admin.job.AbstractPollingTask$3.run(AbstractPollingTask.java:169)
at com.netwitness.platform.server.common.auth.SecurityUtil.runInSpecificContext(SecurityUtil.java:241)
at com.rsa.smc.sa.admin.job.AbstractPollingTask.runTaskInContext(AbstractPollingTask.java:175)
at com.rsa.smc.sa.admin.job.AbstractPollingTask.run(AbstractPollingTask.java:134)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)

 
ResolutionThis is resolved in a RSA Security Analytics version 10.6.1.1
WorkaroundFind the chart name just before the exception thrown above (i.e [name_of_chart]);
look at the rule associated with this chart;
edit the "Order By" to include a Column Name and Sort By property.  
If "Order By" does not have a property, the chart will not show.
On Security Analytics Server,
  • Click Administration
  • Reports - Rules
  • Select the checkbox of the rule that corresponds to the chart that will not show
  • Click on the Edit button for this rule:
editReportRule
 

Attachments

    Outcomes