i get the bellow error when tryimg to add correlator instance to a cluster (persistor)
Unable to connect to repo at "My persistor Hostname"
Error Message – KeeperErrorCode = ConnectionLoss for /arcsight/esm/cluster/host
i am glad that someone tries to have a distrubute environment but can you describe the steps that you are following to add the node with correlator / aggregator process to a perssitor?
hello i m building new environement ,
i installed the persistor without any problem.
now i want to add another node (aggregator and persistor) to the persistor. But i am facing the error mentionned in my first message .
the system ask me the hostname of my persistor i wrote it . but it did not pass this stage
let me understand ..
you finish the installation of persistor and now you moved on nodes to configure the aggregation / persistor processes right ?
This is the first node that you try to install ?
i am glad that you manage to configure the aggregation / correlation service on distribute node.
Indeed repo services is the one that must be always started each time when you configure / add new services on nodes even if all the other services are stopped.
I am facing the same error message, even after starting the repo I am still seeping the same error message
/etc/init.d/arcsight_services start repo
In idea if there was something else next to starting repo to fix this issue ? Do we need to setup password less authentication ?
I had the same Issue with the repo running and found that iptables was blocking. Not sure where in the argumentation it states the port.