9300 Stealthwatch error

[anshuman-kumar]

Hi all,

I am facing issue  Stealthwatch error after the upgradation.any fix  for  this kind of issue.

Current image  : 17.15.4

Old  image : -17.12.4

[Mark Elsen]

  - @anshuman-kumar              Post the full error  please 
                                                PS : my post was only a question, not the solution (has been revoked)

  M.

[anshuman-kumar]

Hi mark,

Please find  the error 

%IOSXE-3-PLATFORM: Switch 1 R0/0: fed: Stealthwatch Cloud is not initialized.Please configure to use this CLI.

[anshuman-kumar]

Enter configuration commands, one per line. End with CNTL/Z.
switch(config)#stealthwatch-cloud-monitor
^
% Invalid input detected at '^' marker.
switch(config)#sensor-name cisco-sensor
^
% Invalid input detected at '^' marker.

[Mark Elsen · Accepted solution]

          - @anshuman-kumar                   FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwq33503
                                                             The bug status is Terminated which can have various reasons
                                                             If that does not align with business needs, then contact TAC and ask for
                                                             a solution

                                                            -==> ++Added    ; check if the Workaround can help you (too)

                                                             You could also try : https://software.cisco.com/download/home/286313862/type/282046477/release/IOSXE-17.15.4d

  M.

[anshuman-kumar]

Hi Mark,

Device PID: -C9300L-48P-4X

I applied the workaround, which is not supporting to the device, is there any other fix?

switch(config)#stealthwatch-cloud-monitor
^
% Invalid input detected at '^' marker.

Switch(config)#sensor-name cisco-sensor
^
% Invalid input detected at '^' marker.

[Mark Elsen]

           - @anshuman-kumar            I don't have another fix besides trying 17.15.4d , if that does not help
                                                       contact TAC

  M.

[anshuman-kumar]

Switch(config)#StealthWatch ?
% Unrecognized command

[anshuman-kumar]

switch(config)#stealthwatch-cloud-monitor ?
% Unrecognized command

[anshuman-kumar]

My question is why this command does not support?

[Mark Elsen]

  - @anshuman-kumar        Ref : https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/SW_6_9_1_Downloading_and_Licensing_DV_2_0.pdf
                                          I think you need a license for stealthwatch and I also doubt if it is supported on the 9300

                                                                     So as far as the original error is concerned :
                                                   %IOSXE-3-PLATFORM: Switch 1 R0/0: fed: Stealthwatch Cloud is not initialized.Please configure to use this CLI.
                                         I think you can ignore it  (sometimes new versions may include new features which are not
                                                                               always supported on all platforms)

  M.

[pieterh · Accepted solution]

read document: 
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/catalyst-center/articles/stealthwatch/ssa-service-on-catalyst-center-user-guide-3-1-x.html

The Stealthwatch Cloud supports Cisco Catalyst 9200 and 9300 devices that are running Cisco IOS XE Release 17.3.1 and later.
-> as you recently upgraded to version 17.15.4, it seems not veri likely that a recent upgrade caused the error,
(unless you did not upgrage for a long time)

but you do need the advantage license:

Product family	Minimum version	License required
Cisco Catalyst 9300 Series Switches	Cisco IOS XE Release 16.9.1	DNA Advantage

=> more likely your license did not activate on the new IOS version ?

[anshuman-kumar · Accepted solution]

How can we avoid this type of situation.

[pieterh]

>>>How can we avoid this type of situation. <<<
I do not think I understand what the question is.
an obvious answer could be : read the release notes carefully 

unless you mean the license did not activate?
maybe we can advise better with more information about 
- license state before upgrade
- license state after upgrade
- how/if this was resolved by activating the license

[Giuseppe Larosa · Accepted solution]

Hello @anshuman-kumar ,

the workaround cannot be configured for a license issue.

As noted by @Mark Elsen there is no real impact in this error message and you can ignore it.

if yout switch is not managed by Catalyst Center you are probably safe to stay with the error

On the other hand if you think you may have license issues you can follow suggested action plan from @pieterh 

You can find other explanations in this previous thread:

https://community.cisco.com/t5/switching/stealthwatch-error-17-15-03/m-p/5282823

there is another bug for the same issue has been opened on Catalyst Center SD Access side:

https://bst.cisco.com/quickview/bug/CSCwo88258

In addition the error log can be filtered following suggestions in the previous thread to use a log discriminator.

Hope to help

Giuseppe