How can I enable rabbitmq management plugins and access rabbitmq of RSA servers through GUI?
Have a look at this KB:
000026920 - How to access the RabbitMQ web interface to monitor and troubleshoot the event broker in RSA Security Analytics
You can apply same steps on the SA server
Thanks and Regards
there is also a web access more user friendly from where you can access rabbitmq and what is the status of all the queues into your decoder (particularly good for crowded queues).
(if you are running 10.6 it is already included) for previous version you just download from the following link:
you should be able to just copy it to /etc/netwitness/ng/logcollector/static and untar with: tar –xvf
and hit those pages (http or https depending on your setup).
I expect that they would work back to early 10.4 version.
Good luck Emmanuele!
i try the link http://logdecoderIP:50101/static/event-processors/ but ask login/password??
You may have to use the admin credentials as this might be the only account defined for this service.
That should be username admin and its relative password.
Same used to access the REST Api interface.
Hope it helps
thansk for the aswer.
I find the correct login but the 2 url dont exist. the response of web server is Internal Server Error. The server encountered an internal error: Error 401 : /static/eventsources/
remove the piece labeled static
To look at the stats for rabbitmq queues it's actually http://logdecoderIP:50101/event-broker/stats/queues
Just to clarify: with the pages I posted, you can see live statistic about the actual "working/NonWorking" queues on the LogDecoder read by rabbitmq; the page is refreshed every xxxx second (you can set it), so it will show a dynamic output of:Active consumers and Numbers of rdqs (rabbitmq files) on the queues.I also run tried your suggestion but the output is slightly different because you have to access deeply the statistic to each queue to get information.
With regards Emmanuele
Thanks all for your reply.
But through this we can only check queues but cannot manage them through GUI.
Below is the screenshot for the rabbitmq management api which I required through which I can manage queues,
This interface was accessible for earlier versions of SA servers but how can I get in 10.5 and later versions.
This interface is still available to be accessed on 10.5/6 if you set up the local SSH tunnel to Log Collector/Sa Server.
You need to make sure to use port 15671, have a look at the example below:
then from putty menu session set up the IP and SSH port of the SA Server/Log Collector:
Then navigate with the browser from the local machine using this URL and you should be good to go:
From Linux/Unix machine or if you use cygwin on Windows this command should do the job:
ssh -L12345:localhost:15671 firstname.lastname@example.org
where 10.xxx.xxx.xxx is the Ip Address of the Log Collector/Sa Server
Can't wait to use this.
Retrieving data ...