Troubleshooting Linux/Agent Communication Issues
2 years ago
Originally Published: 2016-08-05
Article Number
000065521
Applies To
RSA Product Set: ECAT
RSA Product/Service Type: ECAT
RSA Version/Condition: 4.2.x
Platform: Linux
Issue
Following installation of a Linux agent it may fail to populate in ECAT's UI or it may lose connectivity at a later time due to a number of factors.
Resolution
Scenario's
 
1. Linux Agent is not detected in the UI
  • Check to ensure the /etc/init.d/ecat-agent script exists to start the service on the endpoint. If an older version of the rpm was installed that had installation issues such as 4.2.0.0 then it will likely be missing. This may require uninstalling the ecat agent rpm with rpm -e -noscripts <name_of_ecat_rpm> to forcefully remove the corrupt rpm, then reinstall the agent with 4.2.0.2 or a later agent package version. If this does not resolve:
  • Follow the steps listed in kb article 000034145 to confirm if this is either the RC4 issue, or an rpm dependency issue. If neither resolves this issue, contact support.

2. Linux Agent shows offline constantly or fails to connect in machine view in RSA Netwitness Endpoint 4.2.x+
  • Follow the steps listed in kb article 000033764 to review the agent logs on the Linux endpoint. If still unable to resolve, please contact support.