CommandR error during installation or upgrade

Products

Information Centric Analytics

Issue/Introduction

While installing or upgrade Information Centric Analytics (ICA), the following error is displayed in the installer progress screen and captured in the installation log:

Error - Running CommandR processes and waiting for completion. NVD CVE, GeoIP, STIG. Will wait up to 60 minutes for these tasks to complete.

System.Exception: CommandR failed for STIG,NVD CVE,GeoIP

Users are prompted to save a copy of the installation log after installation has completed. A copy of the installation log (RiskFabric.Installer.<yyyyMMdd>.log) is also created in the following folder:

%SystemDrive%\ProgramData\BayDynamics\Logs

Environment

Version : 6.x

Component : CommandR

Resolution

As the error message indicates, CommandR will make a subsequent attempt at processing these elements. CommandR logs the details of these attempts in the following files:

RiskFabric.CommandR.<yyyyMMdd>.log
RiskFabric.CommandR_CubeSyncAndNightly.<yyyyMMdd>.log
RiskFabric.CommandR_CVE.<yyyyMMdd>.log
RiskFabric.CommandR_GeoIP.<yyyyMMdd>.log
RiskFabric.CommandR_STIG.<yyyyMMdd>.log

These are located in the same path as the installation log.

To determine whether this was a transient error, open the installation log and search for the following lines (highlighted in yellow):

2024-09-11 12:49:25,190 [26:INFO] BaseInstallRunner.<Run>b__12_0() Running Running CommandR processes and waiting for completion. NVD CVE, GeoIP, STIG. Will wait up to 60 minutes for these tasks to complete.
2024-09-11 12:49:25,193 [1:INFO] WpfLogger.<Log>b__0() Started    Running CommandR processes and waiting for completion. NVD CVE, GeoIP, STIG. Will wait up to 60 minutes for these tasks to complete.    Started    
2024-09-11 12:49:25,197 [26:INFO] LoadViaRiskFabricImporter.Install() Running RiskFabric.CommandR via invoked process to load NVD CVE, Geo IP and STIG. Check log files in C:\Program Files\Bay Dynamics\Risk Fabric Server Web\RiskFabric.CommandR Logs folder if to see if job failed.
2024-09-11 12:49:25,197 [26:INFO] LoadViaRiskFabricImporter.ForEach() load STIG command line arguments STIG "Data Source="<hostname>";Initial Catalog=RiskFabric;Integrated Security=True;Pooling=True;Connect Timeout=60"
2024-09-11 12:49:25,197 [26:INFO] LoadViaRiskFabricImporter.ForEach() load NVD CVE command line arguments CVE "Data Source="<hostname>";Initial Catalog=RiskFabric;Integrated Security=True;Pooling=True;Connect Timeout=60"
2024-09-11 12:49:25,198 [26:INFO] LoadViaRiskFabricImporter.ForEach() load GeoIP command line arguments GeoIP "Data Source="<hostname>";Initial Catalog=RiskFabric;Integrated Security=True;Pooling=True;Connect Timeout=60"
2024-09-11 12:49:25,198 [26:INFO] LoadViaRiskFabricImporter.Install() Waiting up to 60 minutes for these CommandR tasks to finish.
2024-09-11 12:49:40,279 [26:ERROR] LoadViaRiskFabricImporter.Install() CommandR failed for STIG,NVD CVE,GeoIP
2024-09-11 12:49:40,279 [1:ERROR] WpfLogger.<Log>b__0() Error    Running CommandR processes and waiting for completion. NVD CVE, GeoIP, STIG. Will wait up to 60 minutes for these tasks to complete.    System.Exception: CommandR failed for STIG,NVD CVE,GeoIP    
2024-09-11 12:49:40,286 [1:INFO] WpfLogger.<Log>b__0() Success    Running CommandR processes and waiting for completion. NVD CVE, GeoIP, STIG. Will wait up to 60 minutes for these tasks to complete.    Completed Successfully (15.09s)    
2024-09-11 12:49:40,286 [26:INFO] BaseInstallRunner.<Run>b__12_0() Running SQL Post Upgrade Job
2024-09-11 12:49:40,292 [1:INFO] WpfLogger.<Log>b__0() Started    SQL Post Upgrade Job    Started    
2024-09-11 12:49:40,477 [1:INFO] WpfLogger.<Log>b__0() Success    SQL Post Upgrade Job    Completed Successfully (0.19s)    
2024-09-11 12:49:40,482 [26:INFO] BaseInstallRunner.<Run>b__12_0() Running Run CommandR Cube, SyncAnalyzerObjects then Nightly Processing
2024-09-11 12:49:40,482 [1:INFO] WpfLogger.<Log>b__0() Started    Run CommandR Cube, SyncAnalyzerObjects then Nightly Processing    Started    
2024-09-11 12:49:40,484 [26:INFO] LoadViaRiskFabricImporter.DoInstallViaInvokedProcess() Running RiskFabric.CommandR via invoked process to Sync Analyzer Objects then Nightly Processing. Check log files in C:\Program Files\Bay Dynamics\Risk Fabric Server Web\RiskFabric.CommandR Logs folder if to see if job failed. Arguments CubeSyncAndNightly "<hostname>" "RiskFabric" "<hostname>" "RiskFabric" 1200 EntityCollection,DIMEventSet,UnifiedEventSet,RiskVector,ComplianceEventSet.
2024-09-11 12:49:40,521 [1:INFO] WpfLogger.<Log>b__0() Success    Run CommandR Cube, SyncAnalyzerObjects then Nightly Processing    Completed Successfully (0.04s)

Note the lines highlighted in blue. These indicate a successful retry of CommandR tasks.

The following procedure may also be used to validate CommandR is working as expected:

Open a command prompt (cmd.exe) as an administrator
Navigate to the folder containing the CommandR executable (RiskFabric.CommandR.exe)
NOTE: By default, the path to the CommandR executable is %SystemDrive%\Program Files\Bay Dynamics\Risk Fabric Server Web\RiskFabric.CommandR
Replace <SQLServer-hostname-or-IP> in the following command with the hostname or IP address of your SQL server and execute the command:
```
RiskFabric.CommandR.exe SyncAnalyzerObjects "Data Source=<SQLServer-hostname-or-IP>[\<named-instance>][,<port-number>];Initial Catalog=RiskFabric;Integrated Security=SSPI;" RiskVector DryRun
```
NOTE: If ICA's relational database is installed in a named instance of SQL Server, or if you are using a nonstandard port, you must include these details using the syntax provided above. In addition, if you did not use the default database name ('RiskFabric') when installing ICA, you will need to change the Initial Catalog value in the connection string to reflect this.

If the RiskFabric database is installed in the default SQL Server instance and using the standard port (1433), simply provide the SQL Server hostname or IP address.

Note whether the output logs a success or failure message. If the test fails, contact Broadcom support for assistance.

Additional Information

CommandR command line syntax:

RiskFabric.CommandR.exe [TaskSpecifier] {required parameters}

Supported Tasks:

```
GeoIP ["ConnectionString"]
```

CVE ["ConnectionString"] --> This uses embedded NVD CVE data
    ["ConnectionString"] ["Path to downloaded NVD CVE data"] --> import NVD CVE data from this folder
    NOTE: Download the latest NVD CVE data from https://nvd.nist.gov/vuln/data-feeds#XML_FEED

RunCube [SSASSqlServer] [SSASDatabaseName] [TimeoutInMinutes]

RunSqlAgentJob [SqlServer] [DatabaseName] [TimeoutInMinutes] ["SQL Agent Job Name"]

```
EncryptPassword [PasswordToEncrypt]
```
```
TestEmail
```

CubeAndNightlyJob [SSASSqlServer] [SSASDatabaseName] [DatabaseServer] [DatabaseName] [TimeoutInMinutes]

STIG ["ConnectionString"] --> This uses embedded STIG data
     ["ConnectionString"] ["STIG ZIP file"] --> import STIG data from this ZIP file
     [-extractOnly] ["STIG ZIP file"] --> extract STIG XML data from this ZIP file (no import)
     NOTE: Download the latest STIG ZIP file 'Compilation - SRG-STIG - NON-FOUO' from https://iase.disa.mil/stigs/compilations/pages/index.aspx

SyncAnalyzerObjects [RF_SQLConnectionString] [EntityCollection,DIMEventSet,UnifiedEventSet,ComplianceEventSet,RiskVector] {Optional:DryRun}
        You can specify multiple (comma delimited) object types to sync.

SyncAndNightly [RF_SQLConnectionString] [EntityCollection,DIMEventSet,UnifiedEventSet,ComplianceEventSet,RiskVector] {Optional:DryRun}
        You can specify multiple (comma delimited) object types to sync.

CubeSyncAndNightly [SSASSqlServer] [SSASDatabaseName] [DatabaseServer] [DatabaseName] [TimeoutInMinutes] [EntityCollection,DIMEventSet,UnifiedEventSet,ComplianceEventSet,RiskVector] {Optional:DryRun}
        You can specify multiple (comma delimited) object types to sync.

EnableDUOMFA "ConnectionString" - connection to the RiskFabric relational database