top of page

SmartConnector 6.0.2 RunAgentSetup Script Analysis

  • Writer: Pavan Raja
    Pavan Raja
  • Apr 8, 2025
  • 7 min read

Summary:

To provide a smooth installation process on other systems with similar setups, follow these steps after identifying potential issues related to timezone settings or missing libraries: ### Step 1: Check Timezone Settings If you encounter issues with Java's `TimeZone` object due to incorrect timezone formats like "GMT-00:00" or "GMT+00:00", ensure that the system's timezone is correctly set. On Linux systems, this can be done by creating a symbolic link from `/etc/localtime` to `/usr/share/zoneinfo/GMT`: ```bash sudo ln -sf /usr/share/zoneinfo/GMT /etc/localtime ``` Alternatively, you can set the `TZ` environment variable to "GMT": ```bash export TZ='GMT' ``` ### Step 2: Install Required Libraries For systems similar to RHEL 6.2 with a 64-bit architecture, ensure that specific 32-bit X libraries are installed manually instead of using wildcard rpm installs. The required libraries include: ```bash sudo yum install glibc libX11 libXau libxcb libXext libXi ``` ### Step 3: Verify Java Installation Ensure that the Java Runtime Environment (JRE) is correctly installed and accessible from the command line: ```bash java -version ``` If not, you may need to set up the JRE manually or via a script. ### Step 4: Run the Installer After ensuring that the timezone is set correctly and all required libraries are installed, run the installer again using the command: ```bash sudo /tmp/ArcSight-6.0.2.6627.0-Connector-Linux.bin ``` ### Step 5: Check for Errors If you encounter any errors during the installation process, check the logs and stack traces provided by the installer. The stack trace should indicate where the `NullPointerException` occurs. Based on the provided information, this is typically related to incorrect timezone settings in Java. ### Step 6: Update Timezone Configuration If the issue persists with incorrect timezone settings, ensure that the `/etc/localtime` file points to the correct timezone. You can list available timezones using: ```bash ls /usr/share/zoneinfo ``` Then create a symbolic link to the correct timezone: ```bash sudo ln -sf /usr/share/zoneinfo/ /etc/localtime ``` ### Step 7: Test with TimeTest Java Code As suggested by Gbenga Ogunsakin, you can test your timezone configuration with a simple Java program that prints the time and timezone information: ```java import java.util.TimeZone; public class TimeTest { public static void main(String[] args) { System.out.println("Default TimeZone: " + TimeZone.getDefault().getID()); } } ``` Compile and run this Java code to verify that the timezone is set correctly: ```bash javac TimeTest.java java TimeTest ``` ### Step 8: Document Findings Document all steps taken to resolve the issue, including changes made to `/etc/localtime` or `TZ` environment variable settings, and any other modifications to the system configuration. This documentation will help others facing similar issues in the future. By following these steps, you should be able to provide a smoother installation process for ArcSight-6.0.2 on systems with similar setups.

Details:

The summary of the provided content is as follows: The document discusses a problem encountered with SmartConnector 6.0.2 installation on RHEL 6.2 64-bit systems. It mentions that according to the SmartConnectorProductandPlatformSupport.pdf, version 6.0.2 should be supported on such platforms; however, upon installation, the connector configuration does not start automatically, and the setup claims completion. When attempting to run `runagentsetup.sh`, it fails with a Java error indicating an issue during initialization of the VM: "java/lang/NoClassDefFoundError: java/lang/Object." The author suggests that this might be related to 32-bit library dependencies, as they mention having added several 32-bit libraries to their RHEL 6.2 VMs to support a previous 32-bit product installation. The list of these libraries includes `glibc-2.12-1.47.el6.i686.rpm`, and `libX11-1.3-2.el6.i686.rpm`. The document also highlights that similar issues have been reported in other forums, suggesting a potential need for further investigation into Java class path configurations or specific library dependencies required by the SmartConnector on RHEL 6.2 systems. The issue described involves the installation of a SmartConnector on a RHEL 6.2 x64 system, where the connector setup fails despite ensuring that all necessary libraries are installed. The user mentions installing several required libraries such as libxcb-1.5-1.el6.i686, libXext-1.1-3.el6.i686, libXi-1.3-3.el6.i686, and libXtst-1.0.99.2-3.el6.i686 through the terminal using yum install command. The user follows specific steps outlined in the SmartConnector Users Guide to ensure that all necessary libraries are installed before proceeding with the connector setup: 1. Install 32-bit versions of glibc, libXext, and libXtst on a 64-bit machine if using the Linux Red Hat 6.x platform. 2. Verify the installation by running `rpm -qa` to check for the presence of these libraries in their respective .i686 formats. From the user's response, it is evident that they successfully installed the required libraries and were able to proceed with the SmartConnector setup after ensuring all dependencies are met. The issue might not be directly related to dependency installation but rather could stem from a specific configuration or setup step unique to the RHEL 6.2 environment. In summary, for users facing similar issues on Red Hat-based systems, it is crucial to follow the SmartConnector Users Guide closely and ensure all listed dependencies are installed properly before attempting to set up the connector. The provided text is a discussion thread from a technical support forum, likely related to troubleshooting issues with installing SmartConnector 6.0.2 on a Red Hat Enterprise Linux (RHEL) 6.2 system. Here's a summary of the key points and responses in the conversation: 1. **User Report**: A user named Allen Pomeroy is attempting to install SmartConnector 6.0.2 on an RHEL 6.2 system but encounters errors when running `runagentsetup.sh`. The error message indicates that it cannot find the base class `java/lang/Object`, which suggests a missing or improperly configured Java environment. 2. **User Inquiry**: Pomeroy has already confirmed that both CLI and GUI modes are being used, and Xorg is installed and functioning correctly. He has also checked for all necessary libraries as per the installation guide but still faces issues. 3. **Suggestion from Vini Engel**: Vini Engel suggests that the issue might be related to running in GUI mode without properly configuring X11 (Xorg). He asks if Xorg is installed and configured correctly. 4. **Clarification and Additional Information**: Pomeroy clarifies that he has tried both CLI and GUI modes, but the error persists with a Java exception indicating a missing `java/lang/Object` class. He mentions that all necessary libraries are installed as per the guide, and requests a comparison of package installations if other users have successfully installed SmartConnector on similar setups. 5. **Brian Freedman's Observation**: Another user, Brian Freedman, shares a similar experience where the Arcsight agent installer also faced issues with Java class not found errors, suggesting that there might be an underlying problem related to Java or library configurations across different systems. In summary, the issue seems to revolve around setting up the correct environment for running SmartConnector 6.0.2 on RHEL 6.2, possibly involving missing Java components and potentially needing adjustment in configuration settings or installation of additional libraries. The responses indicate that successful installations have been reported elsewhere, but troubleshooting continues to identify what specific configurations might be needed for a smooth installation process on other systems with similar setups. The provided log file and stack trace details a software installation process for ArcSight-6.0.2.6627.0-Connector-Linux that fails to execute properly upon invocation in a specific environment. This issue is encountered when attempting to launch the Java application from the installer archive using the command: ```bash $ sudo /tmp/ArcSight-6.0.2.6627.0-Connector-Linux.bin ``` Upon execution, the system prompts for a password and attempts to install the software automatically. The process includes several steps such as extracting the Java Runtime Environment (JRE), unpacking it, extracting installation resources, configuring the environment, and finally launching the installer via Java. However, during this process, an error occurs related to graphical installers not being supported in the VM, causing the application to switch to console mode which results in a `NullPointerException`. This leads to the application quitting unexpectedly with a stack trace indicating that it was terminated due to an `InvocationTargetException` caused by a `java.lang.NullPointerException`. The specific details of the error are:

  • **Error Type**: java.lang.NullPointerException (indicating null reference dereferencing)

  • **Stack Trace**: Points to methods within the Java standard library and indicates that an unexpected value was encountered during method invocation or assignment, typically due to a variable being uninitialized.

The error did not occur on other Linux systems tested earlier, suggesting potential differences in system configurations, environment variables, or installed packages between this specific machine and others used for testing. The issue described involves a problem with the TimeZone object class in Java, which does not correctly interpret certain timezone formats such as "GMT-00:00" (or its alternatives like "GMT+00:00", "GMT0"). This results in errors and exceptions. To resolve this, the author of the document provided a solution by compiling a short piece of Java code to print the time and timezone information using the getDefault method. The default method is used to get the current system time most commonly by Java programmers. The original issue was that on Linux systems, the timezone was set to "GMT0" via the /etc/localtime file. To fix this problem, the author made two changes: first, they created a symbolic link from /etc/localtime to /usr/share/zoneinfo/GMT, replacing it with the older format (a regular file containing the contents of GMT0). Second, they set their local TZ environment variable to "GMT". This corrected the timezone issue and allowed the Java code to run without errors. After making these changes, re-running the Java TimeTest showed that the time was correctly displayed with the new timezone setting: "GMT" instead of the original incorrect format "GMT-00:00". The author concluded that this solution corrected the problem they were facing and allowed the installer to run without errors. The conversation is about a user named Brian who has been facing issues while installing the SmartConnector 6.0.2 on a Red Hat Enterprise Linux (RHEL) 6.2 system with a 64-bit architecture. The installation process was failing, and after some research, it appears that specific libraries were required to be installed manually in addition to what is mentioned in the connector user guide. Brian discovered that installing glibc, libX11, libXau, libxcb, libXext, libXi, and other related libraries resolved the installation issue but only when done individually rather than through a wildcard rpm install. These specific 32-bit X libraries were necessary for the connector to function correctly on RHEL 6.2 64-bit systems. The user also noted that after successfully installing all required libraries, SmartConnector was installed without any issues under the /root home directory and not in the default "/opt/arcsight" location as suggested by the documentation. Brian's findings were appreciated by Gbenga Ogunsakin, who responded with gratitude for Brian's research and sharing of findings. The issue involved a customer encountering an error related to timezone settings in Java while using SmartConnector 6.0.2 on RHEL 6.2 64-bit. To resolve the problem, it was recommended by the user (Gbenga) that the local time zone should be set to GMT by running the command `ln -sf /usr/share/zoneinfo/GMT localtime`. This solution worked successfully for the customer, and the issue has been logged in JIRA under CON-12957. The fix is expected to be included with the 6.0.4 connector release.

Disclaimer:
The content in this post is for informational and educational purposes only. It may reference technologies, configurations, or products that are outdated or no longer supported. If there are any comments or feedback, kindly leave a message and will be responded.

Recent Posts

See All
Zeus Bot Use Case

Summary: "Zeus Bot Version 5.0" is a document detailing ArcSight's enhancements to its Zeus botnet detection capabilities within the...

 
 
 
Windows Unified Connector

Summary: The document "iServe_Demo_System_Usage_for_HP_ESP_Canada_Solution_Architects_v1.1" outlines specific deployment guidelines for...

 
 
 

Comments


@2021 Copyrights reserved.

bottom of page