ArcSight Services Fail to Start After Hyper-V Clustering Exercise on DR ESM
"I have no name" error was noticed when logging in as arcsight user after the Hyper-V clustering exercise done on DR at DTB Kenya on 21/08/2023.
Furthermore, when attempting to start the arcsight services under /etc/init.d as root, the following error is displayed:
Will wait upto PT00:02:00.000 for mysqld to start
We tried the following steps to resolve:
1. Removed the arcsight services as recommended by ArcSight documentation
/opt/arcsight/manager/bin/remove_services.sh
2. Reinstalled the arcsight services.
/opt/arcsight/manager/bin/setup_services.sh
3. Start the services one by one starting with postgresql and mysqld.
/etc/init.d/arcsight_services start postgresql
/etc/init.d/arcsight_services start mysqld
However these failed to solve the error.
It was realised that arcsight services failing to start stemmed from the first error of 'I have no name' in bash.
To resolve this, change the permissions of the /etc/passwd file to 644:
chmod 644 /etc/passwd
The error disappears. One can then log in as arcsight user.
The arcsight services can be started from /etc/init.d as the root user.
/etc/init.d/arcsight_services start all
Related Articles
Information Security Policy
Isolutions Associates is committed to the confidentiality, integrity, and availability of her information assets and shall implement measures through the establishment, implementation, maintenance, and continual improvement of an information security ...