000036479 - prepare-for-migrate.sh script issue during RSA NetWitness v11 for Logs Upgrade from 10.6.5

Document created by RSA Customer Support Employee on Jun 27, 2018
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000036479
Applies ToRSA Product Set: RSA NetWitness 
RSA Product/Service Type: RSA NetWitness 
IssueWhen you run "prepare-for-migrate.sh" script for NW v11 upgrade, you may encounter that logcollection service is not stopped as below.
User-added image
In this case, you are not able to proceed NW v11 upgrade from 10.6.5.
Cause"prepare-for-migrate.sh" script does not properly update the actual log collector's configuration(NwLogcollector.cfg) file.
WorkaroundPlease follow these steps to proceed NW v11 upgrade.

1. SSH to Log Collector appliance.
2. Stop Log Collector service
  # stop nwlogcollector
3. Make a backup of current configuration file before making a change.
  # cp /etc/netwitness/ng/NwLogcollector.cfg /etc/netwitness/ng/NwLogcollector.cfg.bkup
4. Edit NwLogcollector.cfg and modify values to "false" as below
  <folder instance="folder" name="odbc" prettyName="odbc">
      <config getRoles="everyone" instance="config" maxLength="255" name="begin_collection_on_startup" prettyName="Start Collection on Service Startup" setRoles="logcollection.manage" value="false"/>

5 Start Log Collector service
  # start nwlogcollector

After above steps, you are able to see that "prepare-for-migrate.sh" script successfully run without any issue.