|Applies To||RSA Product Set: RSA NetWitness |
RSA Product/Service Type: RSA NetWitness
|Issue||When you run "prepare-for-migrate.sh" script for NW v11 upgrade, you may encounter that logcollection service is not stopped as below.|
In this case, you are not able to proceed NW v11 upgrade from 10.6.5.
|Cause||"prepare-for-migrate.sh" script does not properly update the actual log collector's configuration(NwLogcollector.cfg) file.|
|Workaround||Please follow these steps to proceed NW v11 upgrade.|
1. SSH to Log Collector appliance.
2. Stop Log Collector service
# stop nwlogcollector
3. Make a backup of current configuration file before making a change.
# cp /etc/netwitness/ng/NwLogcollector.cfg /etc/netwitness/ng/NwLogcollector.cfg.bkup
4. Edit NwLogcollector.cfg and modify values to "false" as below
<folder instance="folder" name="odbc" prettyName="odbc">
<config getRoles="everyone" instance="config" maxLength="255" name="begin_collection_on_startup" prettyName="Start Collection on Service Startup" setRoles="logcollection.manage" value="false"/>
5 Start Log Collector service
# start nwlogcollector
After above steps, you are able to see that "prepare-for-migrate.sh" script successfully run without any issue.