- Site Collector Overview
- Get Started with Site Collectors
- Install Site Collector
- Set Up Collectors
- Manage Site Collectors
- Site Collector Monitoring
- Troubleshoot the Site Collector
- Pre-checks failed during Site Collector installation and upgrade
- Site Collector UI shows the status INSTALLATION_ERROR
- Download Support Packages for Troubleshooting
- How to reboot the Virtual Machine (VM) successfully to apply security updates?
- What information must be added while creating a support ticket to resolve an issue?
- Site Collector UI is not displaying the heartbeats
- Splunk Collector can't be set up
- Splunk Collector is set up however, logs are not reaching DL/AA
- Only a few of the installed Splunk Collectors are processing logs or EPS has dropped by 50% as compared to last hour
- The Windows Active Directory Collector (formerly known as LDAP Collector) is set up, however, the context data is not reaching DL/AA
- The Windows Active Directory Collector (formerly known as LDAP Collector) is stuck in the ‘Update’ mode after deployment
- Installation is initiated; however, the collector shows the status as ‘Setting Up’ for some time
- Data Lake and Advanced Analytics Does Not Show Context Data
- Context Data from Windows Active Directory Collector is Segmented
- Minifi Permission Denied - Logback.xml File Missing and Config File Update - Failed Error Occurred while Installing the Windows Event Log Collector
- Where should I upload proxy certificates if I am running proxy with TLS interception?
- How to upgrade Linux collector instance?
Download Support Packages for Troubleshooting
If you want to raise a support case for troubleshooting issues associated with a particular Site Collector instance, you can download support packages for that particular Site Collector instance. The support packages contain the required technical information about Site Collector services to help you troubleshoot further.
To download the support package:
On the Exabeam Security Operations Platform home page, click the Collectors tile.
Click Site Collectors.
On Site Collector Instances, in the SUPPORT PACKAGE column, click Generate for the Site Collector instance for which you want to download the support package.
Site Collector starts generating the support package that you can download.
Click Download.
Note
Use the following command to generate the support package if the file download fails via user interface.
sudo /opt/exabeam/bin/ngsccli supportpackage generate
After running the above command, if you see a message No such file or directory which indicates that the ngsccli file does not exist, use the following command to generate the support package:
sudo curl -o ngsccli https://storage.googleapis.com/ngsc_update/exa-cloud-prod/exa-ngsc/ngsccli; sudo chmod +x ngsccli; sudo ./ngsccli supportpackage generate
Provide the downloaded support package files to the support team for further investigation and troubleshooting.