I am geting Intialization error in Broker service and when i am trying to start aggregation. it is throwing error "Aggregation failed to start. TransportException :terminated." Please help.
That log entry alone won't be sufficient to troubleshoot the problem.
Please consider opening a support case and posting the results from the nwtech.sh script.
Also, if you can, please post the 10 lines before and after that logged event from /var/log/messages. That may provide enough detail to identify the problem.
In the meantime, please make sure no filesystems have reached 100% utilization using the df -h command.
Was this a working environment? if so, what changed? Its possible that you may have pushed a custom XLM to that broker that caused this possible failure. I agree with Jonathan. the messages file will have some additional information as to the actual cause.
Look in the /etc/netwitness/ng on the broker and look at the index*.xml was it changed?
check the size. -rw-r--r--. 1 root root 1861 Apr 1 00:38 index-broker.xml
# find . -name core.* -print
Do you have any core files in the broker?
I have got this resolved with the help of support. The custom index file was missing header.
Thanks all for your helpful comments.
Retrieving data ...