Error starting connector configuration

Hello.

In the CentOS7 system, after installing the ArcSight-8.4.4.9261.1-Connector-Linux64.bin connector and running runagentsetup.sh, the process stops at this stage - "Checking for a running instance of connector..."

The agentsetup.log file contains the following information:

<CODE MAP: '8.4.4.9261.1'>
<ArcSight Connector Version: 8.4.4.9261.1>
<ArcSight Parser Version: 8.4.4.9261.1>
[2024-06-28 14:37:44,713][INFO ][com.arcsight.agent.configtool.n] [initializeLogging]Using log implementation 'com.arcsight.agent.loadable.common._FileLog4JLog@815b41f'.
[2024-06-28 14:37:44,727][WARN ][com.arcsight.common.config.h] [getPropertyValue]Could not find property in configuration 'cwsapi.url.prefix'
[2024-06-28 14:37:44,727][INFO ][com.arcsight.common.config.h] [getPropertyValue]com.arcsight.common.config.r: An error occurred in configuration. Unable to find requested property 'cwsapi.url.prefix'.
[2024-06-28 14:37:44,727][WARN ][com.arcsight.common.config.h] [getPropertyValue]Could not find property in configuration 'cwsapi.url.suffix'
[2024-06-28 14:37:44,727][INFO ][com.arcsight.common.config.h] [getPropertyValue]com.arcsight.common.config.r: An error occurred in configuration. Unable to find requested property 'cwsapi.url.suffix'.
[2024-06-28 14:37:44,757][INFO ][com.arcsight.agent.configtool.k] [ensureConnectorRunning]Checking for a running instance of connector...
[2024-06-28 14:37:44,955][INFO ][com.arcsight.agent.configtool.k] [isCwsapiServerReady]Attempting login using url [https://localhost:10001/cwsapi/services/v1]
[2024-06-28 14:38:30,609][INFO ][com.arcsight.agent.Agent] [shutDown]Shutting Down Agent Framework Version [8.4.4.9261.1]

Please help to solve the problem.

Thanks in advance

Bohdan

Parents
  • 0

    Hello, Are there other connector instances running on this machine?
    Can you please check if you have agent.lock file(s) in <connector_home>current/run/ folder?

    Mladen

  • Verified Answer

    +1 in reply to 

    I found two suspicious processes that do not belong to arcsight:

    root 12784 0.0 0.7 11539760 243372 ? Mar 21 0:05 /opt/arcsight/connectors/syslog/current/jre/bin/java -Dcom.sun.xml.bind.v2.bytecode.ClassTailor.noOptimize=true -Djsse.enableSNIExtension=false -D
    root 12799 0.0 0.0 0 0 ? Z Mar 21 0:00 [sight] <does not exist>
    root 12820 0.0 1.5 4684556 503012 ? Tue Mar 21 0:14 /opt/arcsight/connectors/syslog/current/jre/bin/java -server -Djava.security.policy=/opt/arcsight/connectors/syslog/current/config/agent/agent.pol

    The directories specified in this process actually do not exist (they were deleted for some reason).

    Maybe this will help somehow

Reply
  • Verified Answer

    +1 in reply to 

    I found two suspicious processes that do not belong to arcsight:

    root 12784 0.0 0.7 11539760 243372 ? Mar 21 0:05 /opt/arcsight/connectors/syslog/current/jre/bin/java -Dcom.sun.xml.bind.v2.bytecode.ClassTailor.noOptimize=true -Djsse.enableSNIExtension=false -D
    root 12799 0.0 0.0 0 0 ? Z Mar 21 0:00 [sight] <does not exist>
    root 12820 0.0 1.5 4684556 503012 ? Tue Mar 21 0:14 /opt/arcsight/connectors/syslog/current/jre/bin/java -server -Djava.security.policy=/opt/arcsight/connectors/syslog/current/config/agent/agent.pol

    The directories specified in this process actually do not exist (they were deleted for some reason).

    Maybe this will help somehow

Children
No Data