Dears,
i have a demo platform based on 2 separate VM. One is running the SA Server and the second one is running the Hybrid Log (Endpoint, Concentrator and Log Decoder).
Where can/should i install the ESA Server?
On the SA or on the Hybrid appliance?
Hi Svaran,
many thanks for this answers. In the meantime it's exactly what i've read in the doc.
BUT, in the meantime i've installed the latest Patches.
AND deploying a Packet Decoder was OK, BUT installing the ESA Server on top stops in the middle with an error saying that there is a version mismatch.....
It's a demo lab. I'll wait for the real first Patch or better for the first Service Pack.
Have a good day.
A patch or service pack will not solve this for you. ESA is not designed to be deployed on top any other service other than its own VM
your minimum install requires the following images (will not change for the near future)
Head server
Endpoint Log Hybrid (Con, LDec, Endpoint)
ESA
If this is contrary to what you have read somewhere in the docs, please highlight those.
Hi Eric,
i was now able to (re,re,re,re) install the ESA Server and update it to version 11.1.0.2.
BUT now the Respond Server did not starts anymore.
I've tried the changes explained in the https://community.rsa.com/docs/DOC-80087, but the service did not start anymore.
reboot tut immer gut.
Rebooting all appliances solved my problem.
Not well documented/reliable? for me...
I'll definitively wait for SP1!
Hi Gabriel,
After hosting non NW server component, you may need to choose ESA primary to install. Please refer NetWitness Logs & Packets 11.1 Virtual Host Installation Guide page 38.
ESA is not part of other components as SA server and log hybrid.