SA 10.2 SP1, Licensing and Update Problems

[RafaelAggeler]

HI Everyone

I just installed SA 10.2 SP1:

- SA Server

- Concentrator

- Logdecoder

Now there are two issues, maybe somebody else had similar problems:

- I can't license the Logdecoder, whatever I do. It tells me that activation was successfull, but "Licensed" status still sais "no" as well as the system tab on the Logdecoder.

- I can't update the system: "Yum operation failed. The repository is in an invalid state. Please wait until a successful synchronization occurs."

I already tried a lot of things like returning all licenses, deleting license information on the Logdecoder,...that didn't solve the license issue.

Regarding the "repository in an invalid state",...I'm at a loss actually 🙂

Anybody got an idea?

Regards

Rafael

[huanzhou1]

1. Check fneserver log(/var/log/fneserver/) see what's the output when you did activate. Sometimes fneserver has issue, reinstall then try again.

You can use explore to run the licinfo see if any license, if yes, delete then activate.

3. regarding update, please download the sp2 update package and upload to SA console, then do a sync.

once done, for all the SA servers, use below steps to update, should resolve your problem.

mkdir /etc/yum.repos.d/repos.oem

mv /etc/yum.repos.d/CentOS-* /etc/yum.repos.d/repos.oem/

vi /etc/yum.repos.d/netwitness.repo

yum update

##netwitness.repo

-------------------------------------

[nwupdates]

name=Netwitness-Updates-Repo

baseurl=http://192.168.0.10/rsa/updates

enabled=1

gpgcheck=0

file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6 file:///etc/pki/rpm-pgp/rsa-sa-gpg

-------------------------------------

[RafaelAggeler]

Hi

thanks for the hints. I just installed SP2, and all worked well so far! Except that "Update status" sais "Failed" in the Web-UI, but I think that's not really important by now.

But still I cannot license my Logdecoder. It's on "Licensed": "no", but when looking in the "System-->Licensing" Section, it tells me that 1 Logdecoder is currently licensed. But it isn't,...and I don't have another one anymore. Rather strange,...:-)

[huanzhou1]

for logdecoder, explore - sys - license - delAll.

Then deactivate all the devices and do license reset. after that activate again.

hope this helps.

[RafaelAggeler]

I just upgraded to SA 10.3. Update Status seems to be correct now for all the devices except Logdecoder, as that one still refuses to get activated I guess 🙂

I tried deleting from the "explore" menu, also through the GUI (there's a new reset license option in the Devices tab), but activation fails. At least I get the information now that "Logdecoder could not be licensed" and it points me to the logs as well. And the logs tell me:

Unable to acquire license for smcLogDecoder: category - public, code - 0x7000000b (Requested feature was not found.), system - 0x00000000, location - 0x0007026a

So I did a "tail -f fne-error.log" on the SA Server and tried licensing again:

Debug  : [22/Nov/2013:08:47:20 +0000] POST payload of 458 bytes received from ::ffff:127.0.0.1 at endpoint /fne/xml/setreservations

Info   : [22/Nov/2013:08:47:20 +0000] For device "1-881-436-160" 1 count of feature "smcConcentrator" version "2013.0101" reserved.

Warn   : [22/Nov/2013:08:47:20 +0000] For device "2-349-659-848" failed to reserve 1 count of feature "smcLogDecoder" version "2013.0101".

Debug  : [22/Nov/2013:08:47:20 +0000] Table modified_devices write Device record hostid "STRING=1-881-436-160" expiry 2014-02-20 23:59:59 served_status 0

Debug  : [22/Nov/2013:08:47:20 +0000] Table modified_devices copy Device record hostid "STRING=1-881-436-160" expiry 2014-02-20 23:59:59 served_status 0

Debug  : [22/Nov/2013:08:47:20 +0000] POST payload of 204 bytes received from ::ffff:127.0.0.1 at endpoint /fne/xml/setreservations

Info   : [22/Nov/2013:08:47:20 +0000] For device "1-881-436-160" 1 count of feature "smcConcentrator" version "2013.0101" reserved.

Debug  : [22/Nov/2013:08:47:20 +0000] Table modified_devices write Device record hostid "STRING=1-881-436-160" expiry 2014-02-20 23:59:59 served_status 0

Debug  : [22/Nov/2013:08:47:20 +0000] Table modified_devices copy Device record hostid "STRING=1-881-436-160" expiry 2014-02-20 23:59:59 served_status 0

Info   : [22/Nov/2013:08:47:23 +0000] Server refresh completed.

When I look into "Licensing --> Allocations" on the WebUI, I see that theres an smcLogDecoder reserved by SA Server IP, for device id: 2-349-659-848, which is in fact the ID of my logdecoder.

[huanzhou1]

can you check your licensing tab? enough license?

[RafaelAggeler]

It tells me there's:

2 x smcAnalyst_Seat

1 x smcBroker

1 x smcConcentrator

1 x smcDecoder

1 x smcNet_Capacity

1 x smcReporting_Engine

1 x smcSA_Server

There's no smcLogdecoder though...which might be the reason I cannot activate that one machine.

[huanzhou1]

so have you got your issue resolved?.

[RafaelAggeler]

Not really resolved, no, but I guess I see now why licensing doesn't work: there's no license for smcLogDecoder 🙂

[huanzhou1]

you have download.rsasecurity.com access?you can go and check.