Troubleshooting Linux/Agent Communication Issues

Originally Published: 2016-08-05

Last Modified: 2023-09-24

Article Number

000065521

Applies To

RSA Product Set: ECAT
RSA Product/Service Type: ECAT
RSA Version/Condition: 4.2.x
Platform: Linux

Issue

Following installation of a Linux agent it may fail to populate in ECAT's UI or it may lose connectivity at a later time due to a number of factors.

Resolution

Scenario's

1. Linux Agent is not detected in the UI

Check to ensure the /etc/init.d/ecat-agent script exists to start the service on the endpoint. If an older version of the rpm was installed that had installation issues such as 4.2.0.0 then it will likely be missing. This may require uninstalling the ecat agent rpm with rpm -e -noscripts <name_of_ecat_rpm> to forcefully remove the corrupt rpm, then reinstall the agent with 4.2.0.2 or a later agent package version. If this does not resolve:
Follow the steps listed in kb article 000034145 to confirm if this is either the RC4 issue, or an rpm dependency issue. If neither resolves this issue, contact support.

2. Linux Agent shows offline constantly or fails to connect in machine view in RSA Netwitness Endpoint 4.2.x+

Follow the steps listed in kb article 000033764 to review the agent logs on the Linux endpoint. If still unable to resolve, please contact support.

Don't see what you're looking for?

Related Articles