A.0 Troubleshooting

This section contains some of the issues that might occur during installation, along with the actions to work around the issues.

Alerts.alerts Index not getting Created while Upgrading from Sentinel 8.3.1 to 8.6.1
“Visualization server is not ready yet” Message is Displayed when you Open the Visualization Page
Event Visualization not Working as Expected
Read-Only or Write Lock Exceptions on Index Files
Frequent Sentinel RCE Out of Memory Error
Default-Resource-Stickiness Cluster Property is Deprecated
Unable to Configure RCM/RCE Using Virtual IP in HA Setup
In DHCP Environment, Sentinel Server Web UI Icon from Sentinel Server Appliance Page is Redirecting to Blank Page
Unable to Connect to Transformation Hub (T-Hub) After Giving the Correct IP Address/Hostname
Failed Installation Because of an Incorrect Network Configuration
The UUID Is Not Created for Imaged Collector Managers or Correlation Engine
Sentinel Main Interface is Blank in Internet Explorer After Logging in
Sentinel Does Not Launch in Internet Explorer 11 in Windows Server 2012 R2
SSC Not Launching
Sentinel Cannot Run Local Reports with Default EPS License
Synchronization Needs to be Started Manually in Sentinel High Availability After You Convert the Active Node to FIPS 140-2 Mode
The Event fields Panel is Missing in the Schedule Page When Editing Some Saved Searches
Sentinel Does Not Return Any Correlated Events When You Search for Events for the Deployed Rule with the Default Fire Count Search
Security Intelligence Dashboard Displays Invalid Baseline Duration When Regenerating a Baseline
Sentinel Server Shuts Down When Running a Search If There Are Large Number of Events in a Single Partition
Error While Using the report_dev_setup.sh Script to Configure Sentinel Ports for Firewall Exceptions on Upgraded Sentinel Appliance Installations