We have installed SA for Logs and Packets in the environment, and updated to 10.2 SP2. Logs and packets are both being ingested and viewable in Investigator. Problem, when running a report through the reporting engine, it never finishes. Even the simplest reports just continue to say "Running" and never complete...
How to even troubleshoot this...???
- Community Thread
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform
Please consider moving this question as-is (no need to recreate) to the proper forum for maximum visibility. Questions written to the users' own "Discussions" space don't get the same amount of attention and can go unanswered for a long time.
You can do so by selecting "Move" under ACTIONS along the upper-right. Then search for and select: "RSA Security Analytics".
I think it was something hung up in the server. I forced a reinstall of the reporting engine and restarted the server.
Restarting the server may not have been needed, but it seems to help at times.
| Adam Rasnick | Practice Consultant, RSA Professional Services| 423.833.9297| email@example.com | RSA The Security Division of EMC