Hi,
I'm getting crazy trying to put this Legacy Windows Collector in place with SA 10.3.1....
Installation doc only refers to software installation on the 2008 Server, and complex user permissions for non admin-user but nothing regarding the connexion between the SALWindowsCollector and Windows Servers (it's supposed to work like it was working with enVision, but is-it Agentless mode or Windows Legacy mode using WinRM)
Configuration doc is partly avalable on the sadocs.emc.com
and even with this docs I can't make it works.
I'll open a case on the RSA support but in my mind this is not a bug, but some informations missing in docs : looking deeply in the logs, I discovered rabbitMQ need SSL certificates between SALogCollector and SALegacyWindowsCollector. This certificate subjet was covered previously in the enVision documents for Windows Eventing Collector Service.
Can you please confirm I'm on the goood way ?
Sebastien
Thanks to support who solved my problem.
Issue was because of a non-opened port (TCP 5671) for RabbitMQ during WindowsLegacyCollector configuration, causing the failure of the initial certificate exchange.
Even if the port was opened after WLC installation, certificates were not exchanged.
Manualy connecting with 'openssl' command started the communication and now all is running fine.
Next step now ....