000034417 - ECAT Agents not showing up in ECAT Server UI

Document created by RSA Customer Support Employee on Nov 29, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000034417
Applies ToRSA Product Set: NetWitness Endpoint formerly ECAT
RSA Product/Service Type: ECAT
RSA Version/Condition: 4.x
Platform: Window
IssueA new ECAT Agent package is deployed successfully but on the ECAT server its not displaying or listing the new machine.
The server does notify the Administrator of the discovery of new agents, but depressing the refresh button in the ECATUI is not displaying any new clients.
CausePlease open the ConsoleServer-Error.log file and check for the following message, "You have reached the agent count limit".
Default location of the log file in ECAT 4.1.x is C:\ECAT\Server\ConsoleServer-Error.log, which default location for ECAT 4.2.x is C:\Program Files\RSA\ECAT\Server\ConsoleServer-Error.log

As shown above this indicates that the ECAT Server current agent license count has been exceeded, thus not allowing the server to discover any additional agents.
ResolutionTo correct:
1. Uninstall/Remove any unneeded ECAT Agents from the database, see You have reached the agent count limit message in RSA ECAT 4.x
2. Contact your RSA Sales Representative to purchase a larger ECAT Agent license.
NotesThis only applies in the event that this was indeed a successfully agent package deployment, and all of the pre-requisites for communication were met.