Not seeing Spectrum alarms in OI

Products

• DX Operational Intelligence
• DX NetOps
• CA Spectrum

Issue/Introduction

Not seeing Spectrum updates and alarms in DOI

Environment

Release : 20.2

Component : CA DOI Foundations

Cause

After a review of the SpectrumDataPublisher/logs/SpectrumDataPublisher.log file, we found the following error

2021-05-24 14:32:54,225 INFO main: [client.ConnectionValidator] [validateTas] - Requested URL : {}
2021-05-24 14:32:54,321 ERROR main: [handler.HttpResponseHandler] [handleIOException] - Connection IOException: https://apmgw.dxi-na1.saas.broadcom.com/tas/graph/store
2021-05-24 14:32:54,321 FATAL main: [client.AbstractHttpClient] [execute] - Error Message: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2021-05-24 14:32:54,321 ERROR main: [client.ConnectionValidator] [validateTas] - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2021-05-24 14:32:54,321 ERROR main: [client.ConnectionValidator] [validateTas] - SSL error, import valid certificates.
2021-05-24 14:32:54,321 ERROR main: [client.ConnectionValidator] [validateAll] - TAS connection failed

 

Resolution

 

This is clearly a certificate issue.

We loaded the certificate using the following commands

1: Download and load certificate using instructions in section "Import SSL (https) Certificate into SpectrumDataPublisher" in docops

Import SSL (https) Certificate into SpectrumDataPublisher

2: Stop the connector

run.sh stop

3: Update the BearerToken in the AlarmReconcileConfiguration section of the configuration file ConnectorConfig.xml (This is required for Alarm synchronization on connector startup)

4:Start the connector

run.sh start

If you get an SSL exception, even after you import the SSL certificates.

Add the following tags in the ConnectorConfig.xml file:

<DisableSSLHostnameVerifier>true</DisableSSLHostnameVerifier>
<TrustAllX509Certificates>true</TrustAllX509Certificates>

then restart the connector using the run.sh start command.