After upgrading to Security Analytics version 8.2.1, the appliance reboots, but capture cannot be started for at least 20-25 minutes.
There is a script called check_slot_files that is running and the "solera-captured" service cannot be fully started until this script has completed. You can run the 'top' command from the command line to see if the check_slot_files process is listed towards the top.
This seems to be more of an issue with appliances with large storage arrays attached or large amounts of captured data (hundreds of TBs)
Once the check_slot_files script completes, the solera-captured service will start and the appliance will function normally. The check_slot_files script has been optimized in version 8.2.2.