McAfee ESM Database Unavailable/Rebuilding

[Former Member]

I am getting a constant database unavailable at this time because the database is rebuilding. Also, the key validation failed. I have spent countless hours trying to fix this issue but to no avail. I have searched and searched online with no luck. I even called McAfee and they said they couldn't help because I didn't have a grant number available. My organization doesn't provide this to anyone and everyone. Does anyone know how to fix this?

[Former Member]

We will need to know some additional information.

Which version of SIEM are you running?

Database logging has changed between ESM v10 and ESM v11. You can take a peak at the NitroError.Log files and see what errors the database is experiencing. Easiest way to locate the file is by doing the following command:

'find / -iname NitroError.Log'

The files should be located in either the /usr/local/ess/data/ or /usr/local/ess/sf_data/ directories.

Depending on the version, you may have a file in one, or both directories. 

[David1111]

Hi BryanD,

first you should get your Grant number from the Company. 

if your Administrator of the System you must have it.

regarding a solution:

for a long term solution contact the support in order to investigate and understand the core problem.

but for a simple temp solution

go to settings > clustering > database port > change it to a different number and after that reverse back to the original port number that was there.
click the write button this will restart the database service.

Best Regards👍👍👍

David.