jtsapos1 Absent Member.
Absent Member.
3112 views

"Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

 

 

 

 

consolewizard.log and I keep getting the same message:

  

  "Default configuration manager is not initialized, unable to read 'rsbundle.missed.prop.timeout.sec' from the server configuration file. Will use default value -1"

  

  "server configuration file" is this referring to a configuration file on the manager server?

Running out of ideas on this. Can anybody help?

 

Labels (1)
Tags (1)
0 Likes
1 Solution

Accepted Solutions
dharshin1 Absent Member.
Absent Member.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

Hi,

First, verify that the manager is running.

On a console type:

netstat -ntlp | grep 8443

Then you should get something like this:

tcp    0 :::8443                 :::*                    LISTEN  3284/java

If not, you have to see what went wrong in the logs. You should look at server.log and server.std.log in <arcsight-home>//manager/logs/default/ directory. Typically it's /opt/arcsight/manager/logs/default/.

If you have a listening process, then the problem could be your host firewall - which get installed if you went with the default options.

Try disabling iptables for a while.

/etc/init.d/iptables stop

Then try to open up a connection to https://<ip-address>:8443 in your browser. If it gives you an error (a certificate error), then your connection is working. Then try https://<hostname>:8443 with a browser. It should give you a login prompt (after accepting the certificate).

If you are here, that meas everything is okay from the server side and you should be ready to go.

Cheers!

Dharshin

View solution in original post

0 Likes
9 Replies
Michel Beaudry Outstanding Contributor.
Outstanding Contributor.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

Which OS are you running  your console on (Windows or Linux)? If you have access to telnet program you may confirm that port 8443 is open and listening by typing telnet your_esm_ip 8443. If it's not open the you'll get a connection refused which is likely what you will get.

A certificate issue wouldn't generate a message such as "Couldn't connect to the ArcSight Manager" .

Regards,

0 Likes
jtsapos1 Absent Member.
Absent Member.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

Telnet is disabled on our network (I already tried that as well). Any other ideas? thanks

0 Likes
Michel Beaudry Outstanding Contributor.
Outstanding Contributor.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

Have you tried to access Arcsight Command Center with your web browser at https://your_esm_ip:8443. That should indicate you if the problem lies with your console installation or network.

Regards,

0 Likes
jtsapos1 Absent Member.
Absent Member.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

Yes, tried that as well. Nothing...so what do you think it could be on the network?

Firewall is not blocking anything. ESM Host names have been added to the hosts file and I can ping the ESM hostname and IP address...

Also removed and re-installed the console app.

0 Likes
Michel Beaudry Outstanding Contributor.
Outstanding Contributor.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

From your original post you're saying that all processes are up running, which means you have ssh access to your ESM. If it's running RHEL and you have root privileges, type iptables --list , you should see the following line that allows port 8443:

ACCEPT      tcp  --  anywhere             anywhere            state NEW tcp dpt:pcsync-https


Otherwise, try stopping iptables to test your connection if this is allowed in your environment.



0 Likes
pbrettle Acclaimed Contributor.
Acclaimed Contributor.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

Check the server.log and sever.std.log files - if you can't get to the server through open ports, then maybe the ESM manager isn't up correctly? I have seen it where you can run a PS and see the process, but it is stuck in a re-start scenario. So I would check and confirm that it is started, bound to the correct IP address / interface and go from there - at least that way you can check and eliminate this.

From there, you can check the open ports on the server and show that you can get to the services on localhost (bypassing iptables). So you should be able to identify where the problem is and what is going on.

0 Likes
dharshin1 Absent Member.
Absent Member.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

Hi,

First, verify that the manager is running.

On a console type:

netstat -ntlp | grep 8443

Then you should get something like this:

tcp    0 :::8443                 :::*                    LISTEN  3284/java

If not, you have to see what went wrong in the logs. You should look at server.log and server.std.log in <arcsight-home>//manager/logs/default/ directory. Typically it's /opt/arcsight/manager/logs/default/.

If you have a listening process, then the problem could be your host firewall - which get installed if you went with the default options.

Try disabling iptables for a while.

/etc/init.d/iptables stop

Then try to open up a connection to https://<ip-address>:8443 in your browser. If it gives you an error (a certificate error), then your connection is working. Then try https://<hostname>:8443 with a browser. It should give you a login prompt (after accepting the certificate).

If you are here, that meas everything is okay from the server side and you should be ready to go.

Cheers!

Dharshin

View solution in original post

0 Likes
jtsapos1 Absent Member.
Absent Member.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

I got to this point:

tcp        0       0 0.0.0.0:8443           0.0.0.0:*                LISTEN       57828/java

So we know the manager is running. I could not disable IP tables as I don't have root access.

Checking the server.log everything seems to be running fine. No error messages.

Same with server.std.log no error messages or indications of continuous re-starts as Paul mentioned.

0 Likes
jtsapos1 Absent Member.
Absent Member.

Re: "Cannot Connect to ArcSight Manager" Error 6.8c Console

Jump to solution

Hey guys, problem solved. The IP Tables were updated to allow access through :8443. That solved the problem of connecting to the ESM. Thanks everyone for your help!

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.