000035481 - RSA NetWitness Reporting Engine receives a data source error while trying to update rules

Document created by RSA Customer Support Employee on Aug 18, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035481
Applies ToRSA Product Set: NetWitness Logs and Packets
RSA Product/Service Type: Reporting Engine
RSA Version/Condition: 10.5/10.6
IssueWhen trying to update a Reporting Engine rule, the data source displays the error "Schema fetched from data source was null for data source".
Similar to below :
User-added image
CauseInternal data source pointers become desynchronized. 
Resolution1. Remove all available data sources from Reporting Engine
2. Click Apply
3. Add all reporting sources back to the Reporting Engine
4. Click Apply
5. Attempt to update the rule again.