Threshold Events stopped appearing in DX NetOps Performance Management Portal

Products

• DX NetOps
• CA Performance Management - Usage and Administration

Issue/Introduction

Threshold Profiles are not generating Threshold raise/clear events.

Environment

DX NetOps Performance Management: Any version

Cause

a) Based on the following snip from the /opt/IMDataAggregator/apache-karaf/data/log/karaf.log file, there is a certificate issue:

WARN  | EventPush        | 2024-10-17T15:59:30,307 | PhaseInterceptorChain | ache.cxf.common.logging.LogUtils  465 | org.apache.cxf.cxf-core |       | Interceptor for {http://netqos.com/nqevents/EventManager}IEventManagerWSService#{http://netqos.com/nqevents/EventManager}Push has thrown exception, unwinding now
org.apache.cxf.interceptor.Fault: Could not send Message.

Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

ERROR | EventPush        | 2024-10-17T15:59:30,309 | EventProducerWS | or.eventproducer.EventProducerWS 1000 | a.im.NPCConnector.bundle |       | Failed to push 1200 events: Could not send Message.

b) Based on the following snip from the /opt/IMDataAggregator/apache-karaf/data/log/karaf.log file, the DA cannot resolve the Portal hostname:

Caused by: java.nio.channels.UnresolvedAddressException

ERROR | EventPush        | 2024-12-17T10:29:31,628 | EventProducerWS | or.eventproducer.EventProducerWS 1000 | a.im.NPCConnector.bundle |       | Failed to push 1200 events: Could not send Message.

Snip from the /opt/IMDataAggregator/apache-karaf/data/log/Exception.log file:

2024-12-17 08:03:43,2992024-12-17T08:03:43,299 | ERROR | ExceptionLog | An existing application exception RECURRED (Key=830eeae88fcd0d2b8b90760da123bbec6f1f9b96), Recurrence count=147 : Failed to open http URL connection to http://<Portal_hostname>:8481/dm/contactstatus/update. : <Portal_hostname> | (ExceptionLogger.java:104) 

Resolution

a) Update the certificate on the DA host.

b) Edit the /etc/hosts file on the DA host and fix/add the Portal hostname and IP Address.

Additional Information

Portal

To export the certificate:
/opt/CA/jre/bin/keytool -exportcert -keystore /opt/CA/PerformanceCenter/jetty/etc/keystore -storepass changeit -alias capc -file /tmp/capccert.cer

 

DA

To list the certificates:
cd /opt/IMDataAggregator/jre/lib/security/
/opt/IMDataAggregator/jre/bin/keytool -v -list -keystore cacerts

To delete the alias:
/opt/IMDataAggregator/jre/bin/keytool -delete -alias capc -keyalg RSA -keystore cacerts

To import the certificate from CAPC:
/opt/IMDataAggregator/jre/bin/keytool -importcert -keystore /opt/IMDataAggregator/jre/lib/security/cacerts -storepass changeit -alias capc -file /tmp/capccert.cer

To list the certificates:
/opt/IMDataAggregator/jre/bin/keytool -v -list -keystore /opt/IMDataAggregator/apache-karaf/etc/truststore

To delete the alias:
/opt/IMDataAggregator/jre/bin/keytool -delete -alias capc -keyalg RSA -keystore /opt/IMDataAggregator/apache-karaf/etc/truststore

To import the certificate from CAPC:
/opt/IMDataAggregator/jre/bin/keytool -importcert -keystore /opt/IMDataAggregator/apache-karaf/etc/truststore -storepass changeit -alias capc -file /tmp/capccert.cer

 

systemctl stop dadaemon

systemctl start dadaemon