NFA Reporter System Status Watchdog Key Error

Products

• CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

These 4 services always show a 'stopped' status with a relatively current time but yet the system is functioning as expected otherwise and Watchdog is setup properly.:

NetQoS Reporter/Analyzer General Service
NetQoS Reporter/Analyzer Pump Service
NetQoS Reporter/Analyzer Query Service
NetQoS Reporter/Analyzer Report Service 

If the Watchdog Log shows errors like this, read this document:

0:18:03 2 - ReporterProcesses - Error checking SNMP process information :
An item with the same key has already been added.
System.ArgumentException: An item with the same key has already been added.
   at System.ThrowHelper.ThrowArgumentException(ExceptionResource resource)
   at System.Collections.Generic.Dictionary`2.Insert(TKey key, TValue value, Boolean add)

Cause

There is a key conflict with the NFA RIB Service and a 3rd party programs "sumo-collector" service by SumoLogic Collector.

Environment

Component : NQRPTA - REPORTERANALYZER

Resolution

To resolve this issue, please stop or disable the "sumo-collector" service on the NFA Console Server and then restart the NetQoS Reporter/Analyzer Watchdog Service.

If you cannot disable the SUMO Logic software, please follow these instructions:

1. Rename the Rib wrapper file from "x:\CA\NFA\RIB\wrapper\wrapper.conf" to "rib-wrapper.conf"

2. Using the registry to edit the RIB Service:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CA NFA RibSource

We will want to edit the value for "ImagePath".

Towards the end of the string value, we can change the "wrapper.conf" to "rib-wrapper.conf".

3. Then we can restart the CA NFA RIB Service followed by the NetQoS Reporter/Analyzer Watchdog Service.

Everything should functions properly except it will show the RIB Service as stopped. This will be a cosmetic issue only until NFA 10.0.5 release.