Troubleshooting the investigation dashboard and enterprise search

Use the GuardAPI to diagnose investigation dashboard and enterprise search issues.

Symptoms

Enterprise search is enabled but the investigation dashboard is not showing full data; or a datamart is not exporting data as expected.

Causes

Causes can be any of:
  • Enterprise search is not enabled.
  • Firewall issue prevents communication between the central manager and the managed units.
  • SSL exception prevents communication between the central manager and the managed units.
  • Hardware on central manager is not sufficient to run enterprise search.
  • Datamart is not extracted due to either error or missing schedule.
  • Internal Guardium® search engine is down.
  • Internal Guardium search engine did not upgrade successfully.

Diagnosing the problem

The GuardAPI command test_solr runs diagnostics on your system. The output indicates if there are any problems, and gives detailed instructions on resolving them. Follow the instructions provided. Here are three example of output.
Figure 1. Output to solr_test, no details, no issues reported
Output to solr_test, no details, status is good
Figure 2. Output to solr_test, with details, no issues reported
Output to solr_test, with details, status is good
Figure 3. Output to solr_test, no details, issue reported
Output to solr_test, no details, issue reported