IBM Support

Search for Data Activity gives "Search is currently unavailable" in the Guardium GUI

Troubleshooting


Problem

What to check/ troubleshoot when data search - Investigate > Search for Data Activity - shows "Search is currently unavailable"?

Symptom

The following Error can be seen in the Guardium GUI :-

  • Search is currently unavailable; please try again later. If the problem persists contact your system administrator.


Cause

Central manager is not reachable to its managed unit via port 8983 and 9983.

Resolving The Problem

The following steps reconnect MU to CM for enterprise search:

1. Go to the Central Management (CM) page, verify if the Managed Unit (MU) which returns the error is showing as green (active).

2. Port 8983 and 9983 must be bi-directionally opened in any firewall between MU and CM. To test, run the following command in cli:

  • support show port open <IP> <port>

Expected results:

Port CM->MU MU->CM
9983 No connection Connection
8983 Connection Connection

3. Set enterprise search options via CLI on the CM

  • grdapi set_enterprise_search_options distributed_search=cm_only
    • restart network - (wait for 4-5 mins after that)
  • search options:
    • cm_only : only the CM can do remote Solr requests to the collectors and view enterprise search data
    • all_machines : All appliances can do remote Solr requests to the collectors and view enterprise search data

4. Enable Quick Search on the CM and MUs if it's not already done

  • grdapi enable_quick_search schedule_interval=2 schedule_units=MINUTE

5. Enable Outlier on the MU if it's not done and outliers is used:

  • grdapi enable_outliers_detection schedule_interval=1 schedule_units=HOUR

6. Restart network on the MU

  • restart network

7. Login to the GUI

If the error still shows :-

  • collect the following output from this cli command
    • support must_gather datamining_issues
    • From fileserver grab the logs and then look inside solr.log. If the issue is connectivity, check the network resolver setting.
      • show network resolver all
  • If the problem can not be determined from checking the solr.log, try to reset enterprise search. Following instructions here:

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Component":"Guardium Database Activity Monitor","Platform":[{"code":"PF004","label":"Appliance"}],"Version":"10.1;10.1.2;10.1.3;10.1.4;10.5","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
30 August 2018

UID

swg21999392

Page Feedback