000035748 - Issue with All-in-One Logs upgrade from RSA Security Analytics or to due to RabbitMQ

Document created by RSA Customer Support Employee on Dec 9, 2017Last modified by RSA Customer Support Employee on Mar 25, 2019
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000035748
Applies ToRSA Product Set: NetWitness Logs & Network / Security Analytics
RSA Product/Service Type: Security Analytics UI,
All-In-One (AIO) Appliance
RSA Version/Condition: and later
Platform: CentOS
O/S Version: EL6

When you update from RSA Security Analytics or to in All-in-One Logs setup from Security Analytics UI, the puppet and rabbitmq-server services are stopped.

Example Update Error screen in the user interface:

Update Error
Cannot complete the Update.
Resolve the following errors and try again.

:"Execution of '/usr/yum -d 0 -e 0 -y update rsa-puppet-scripts' returned 1: Error:
Package: python-libs-\n Requires: libcrypto.so.10\n
Removing: openssl-1.0.1e-48.el6_8.i686 (@RSASoftware)\n Requires: libcrypto.so.10\n
Obsoleted By: libowb1_0_1- (@RSASoftware)\n Not found\n Available:

The package nwlogcollectortools also fails to upgrade.
CauseUpgrade hangs due to rabbitmq-server being in stopped status.

Upgrade process stopped after this line in the /var/log/yum.log file:

Mar 10 19:44:13 Updated: rabbitmq-server-3.5.7-2.el6.noarch
ResolutionRSA Security Analytics AIO devices are no longer supported beginning in RSA NetWitess 11.  If this issue has occurred in 10.6.x the workaround is recommended.
If you are experiencing this issue and still need assistance, contact RSA Customer Support and quote this article number.
WorkaroundPerform the following:
  1. Start the puppet service using the following command:

    service puppet start

    In the background, this will run `puppet agent -t` which should restart any stopped instances of rabbitmq-server.
  2. In the RSA Security Analytics UI, check if the update is successful and click Reboot.
  3. After the RSA Security Analytics user interface is back up, check the updates on the Host view and click Update.
  4. Click Reboot.