Stealth Audit Collector inserts duplicate records in RSA Identity Governance and Lifecycle
2 years ago
Originally Published: 2016-12-09
Article Number
000065808
Applies To
RSA Product Set:  RSA Identity Governance and Lifecycle (RSA G&L)

 
Issue
On the Stealth Audit side that feeds into RSA G&L, many duplicate records are created.
On trying to delete them, they will not get deleted.
In the screenshot below, we can see the erroneous entries.
They have an "=" sign and what looks to be a computer grid after it, and come up as offline.
 
User-added image
 
Resolution
This issue can be resolved by following either of the below-mentioned methods:-

1) Run the following script in SQL management studio
 
--Script to delete hosts in the following format: host.test.com={8ED7CE93-2E2E-400F-90E3-EC88A24E34FB}
 
 
 
DECLARE @badHosts TABLE 
(name varchar(64) not null ,hostid varchar(40) not null) 
 
 
insert into @badHosts 
select name, hostID
FROM SA_HostMasterTbl 
WHERE [Name] LIKE '%={%}'
 
delete from [HostMaster_SANodeFilter]
where hostid in (select hostid from @badHosts)
 
delete from [HostListsContentTbl]
where hostid in (select hostid from @badHosts)
 
delete from [SA_HostMasterTbl]
where hostid in (select hostid from @badHosts)


 
2)   
or install the following job in the StealthAUDIT console to be able to run it whenever you need to :-  http://downloads.stealthbits.com/access/files/Utilities/Jobs/JOB_FixHostInventoryState.zip
  1.       right click jobs in StealthAUDIT
  2.       extract the contents of the zip into the jobs tree (make sure there’s only one folder above the xmls – sometimes the extraction process creates a second)
  3.       refresh the jobs tree in StealthAUDIT
  4.       run job
Notes
1) This issue is not specific to any RSA G&L version.
2) As informed by Stealth Audit Support team, they do not have a root cause for this issue.
3) This issue will be resolved in 7.2 and later versions of StealthAUDIT.