topic Re: Stealthwatch unregistered in Security Analytics

Stealthwatch unregistered

manvik — Wed, 25 Sep 2024 10:26:18 GMT

While booting SNA Flow collector for first it's showing "The model is unregistered". How to resolve this.
I have attached a screenshot with this.

Re: Stealthwatch unregistered

Aref Alsouqi — Wed, 25 Sep 2024 13:59:26 GMT

Not sure if this helps, but if you try to SSH into this FC using SysAdmin user you will get an interactive menu where you can go to Advanced and select to recover the node, I can't remember the exact steps to get to that recovery option, sorry. Based on my experience, troubleshooting issues on StealthWatch node is so complicated and there is no enough documentation out there to help much. If this node is a newly deployed node, probably the fastest way to sort this out would be to redeploy it. Alternatively, I would raise this with Cisco support.

Re: Stealthwatch unregistered

manvik — Wed, 25 Sep 2024 18:25:45 GMT

we are connecting the direct console, the initial screen after sysadmin login is the screenshot i shared. I was thinking of reimaging the device with the iso.

Re: Stealthwatch unregistered

Aref Alsouqi — Thu, 26 Sep 2024 08:29:46 GMT

In that case I would go ahead and reimage.

Re: Stealthwatch unregistered

manvik — Thu, 26 Sep 2024 09:10:39 GMT

I did an iso reimage and it fixed the issue.

https://www.cisco.com/c/en/us/support/docs/security/stealthwatch-enterprise/218049-reinstall-secure-network-analytics-opera.html

Re: Stealthwatch unregistered

Aref Alsouqi — Fri, 27 Sep 2024 11:51:52 GMT

Yeah sadly with StealthWatch I'd always found troubleshooting a bit tricky. Glad to know the issue is now fixed.

Re: Stealthwatch unregistered

Dgme — Wed, 02 Oct 2024 19:26:17 GMT

We're connecting to the direct console. After the sysadmin login, the initial screen is shown in the screenshot I shared. I’m considering reimaging the device with the ISO.