Article Number | 000035280 |
Applies To | RSA Product Set: Security Analytics RSA Product/Service Type: Server / Head Unit, Core Appliance RSA Version/Condition: 10.6.3 Platform: CentOS O/S Version: EL6 |
Issue | After upgrading the Security Analytics server to 10.6.3, the following puppet errors are noticed on other hosts:
May 22 20:28:00 SA-Server puppet-agent[34184]: (/Stage[main]/Logdecoder/File[/usr/lib/collectd/python/comp_modules/cs_logdecoder_remediationstats.py]) Could not evaluate: Could not retrieve information from environment production source(s) file:/usr/lib/collectd/python/cs_logdecoder_remediationstats.py May 22 20:28:00 SA-Server puppet-agent[34184]: (/Stage[main]/Concentrator/File[/usr/lib/collectd/python/comp_modules/cs_concentrator_remediationstats.py]) Could not evaluate: Could not retrieve information from environment production source(s) file:/usr/lib/collectd/python/cs_concentrator_remediationstats.py May 22 20:28:10 SA-Server puppet-agent[34184]: (/Stage[main]/Yumconfig/Exec[disable-Centos-Repos]/returns) executed successfully May 22 20:28:14 SA-Server puppet-agent[34184]: (/Stage[main]/Collectd/Service[collectd]) Dependency File[/usr/lib/collectd/python/comp_modules/cs_logdecoder_remediationstats.py] has failures: true May 22 20:28:14 SA-Server puppet-agent[34184]: (/Stage[main]/Collectd/Service[collectd]) Dependency File[/usr/lib/collectd/python/comp_modules/cs_concentrator_remediationstats.py] has failures: true May 22 20:28:14 SA-Server puppet-agent[34184]: (/Stage[main]/Collectd/Service[collectd]) Skipping because of failed dependencies |
Cause | The collected service refers to three files that are newly added in version 10.6.3 under /usr/lib/collectd/python/comp_modules:
- cs_concentrator_remediationstats.py
- cs_decoder_remediationstats.py
- cs_logdecoder_remediationstats.py
Therefore any concentrators and log/packet decoders that have not yet been upgraded to 10.6.3 will show the errors. |
Resolution | To resolve the issue, upgrade the affected hosts to the same version (10.6.3.0 or later) as the RSA Security Analytics server / head unit. |