Summary
Upon installing or upgrading WiNC to version 8.4, some customers may experience error stoppage in event retrieval ERROR MQMessageSender - Exception in opening TCP client connection. Exception: An error occurred during encode or decode operation

Products
ArcSight Standard Connectors

Environment
SmartConnectors WiNC 8.4

Situation
After installing or upgrading to SmartConnector version 8.4, the connector may experience errors collecting events. See below error samples.
agen.out.wrapper.log
==============
INFO | jvm 1 | 2022/11/21 17:14:12 | [Mon Nov 21 17:14:12 CET 2022] [INFO ] New TLS socket connection opened for [127.0.0.1:56279], conn [com.arcsight.agent.bt.b.k$e@6eb2685a], now have [1] active connections.
INFO | jvm 1 | 2022/11/21 17:14:14 | [Mon Nov 21 17:14:14 CET 2022] [INFO ] New TLS socket connection opened for [127.0.0.1:56282], conn [com.arcsight.agent.bt.b.k$e@5f96c39c], now have [2] active connections.

wincagent.log
=========
2022-11-21 17:14:14,798 [ 1] INFO MQClientManager - Created sender[0] on queue://xxxxxx000161!9202c975-d6a4-4875-9f41-e897001c34d1!localhost!c950eb3b-7bf1-468c-90d1-f1e11c4b3a27
2022-11-21 17:14:14,798 [ 1] INFO MQMessageSender - Using TLS protocol to send events
2022-11-21 17:14:14,798 [ 1] INFO MQMessageSender - Using port 30000 for Tcp communication
2022-11-21 17:14:15,142 [ 1] ERROR MQMessageSender - Exception in opening TCP client connection. Exception: An error occurred during encode or decode operation.

agent.log
======
[2022-11-21 17:14:15,158][INFO ][com.arcsight.agent.bt.b.m] [handleAccept]New TLS socket connection opened for [127.0.0.1:56284], conn [com.arcsight.agent.bt.b.k$e@1d7d8cd2], now have [4] active connections.
[2022-11-21 17:14:15,486][INFO ][com.arcsight.agent.winc.j$d] [run]CheckerTask run method 0

Cause
This may be as a result of a new parameter introduced in version 8.4 for making TLS connections.
agents[0].communicationprotocol=TLS

Resolution

• Stop the connector.
• Edit the agent.properties file
• Locate and change the TLS protocol to Raw TCP

ie: Change agents[0].communicationprotocol=TLS
To agents[0].communicationprotocol=Raw TCP

• Save the changes and restart the connector.

Knowledge Base Article Link

URL Name
KM000012323