Dell CEPA 9.0 and Unity just get message

Hi,

Thanks for your question.

Which Unity product are you using? What is the OE version? https://dell.to/4hSpHOi this might help. https://dell.to/40Q9ouo

@DELL-Josh Cr​  I followed all that already, i setup for SMB events. Unity is VSA Community Edition. Need some help on that, no more HTTP requests are coming from CEPA server.

Which CEPA software are you using?

@DELL-Josh Cr​ what do you mean? we installed CEPA 9.0 and then configure registry keys, i tried with VCAPS endpoint and CEEP -> Audit endpoint none are working. 

We need to solve this asap, is there any mail for more specific  support of this?

If you have a professional license you should be able to call phone support. If it is Community edition there is no support since it is not intended for production environments. 

anything else to check? there is no much documentation about this on how to get audit events with CEE/CEPA in an http endpoint, in isilion format to specify the server is http://xxxx:12228/cee in unity is just the ip doesnt allow port or url path

also tried with isilon and same not getting events in http endpoint

Make sure HKLM\Software\EMC\CEE\CEPP\Audit\Configuration\EndPoint is configured on the CEPA server and that the following do not exist HKEY_LOCAL_MACHINE\SOFTWARE\EMC\CEE\CEPP\CQM\Configuration
HKEY_LOCAL_MACHINE\SOFTWARE\EMC\CEE\CEPP\VCAPS\Configuration

https://dell.to/41i1fRb

You could also do something like wireshark and see what is being sent and make sure everything is pingable.

When configuring a new CEE to talk to an existing Endpoint, sometimes the endpoint may need a reboot in order to properly register the CEE.
Make sure to restart the EMC CEE/CAVA services after making any change to the registry for the endpoints.

Make sure ports are open between the CEE and the endpoint, typically port 80 between CEE and endpoint, unless configured otherwise.
CEE needs to be able to ping the Endpoint as well.
When CEE is able to talk to endpoint messages in the dbgview should show similar to "CEPPAPIWrapper[AUDIT][AUDITAPP][101.211.18.135]::CCEPPAPIWrapper::HeartBeat(): Response: HB Status: 0 - CEPP_SERVICE_ONLINE".
Check to make sure the CEE and Endpoint(s) are not highly utilized, as this can result in delays and will trigger heartbeat errors.  The cluster will fail to send audit events and believe CEE and endpoints are unavailable if the heartbeat, or response to sending events, takes over 3 seconds to respond.

@DELL-Josh Cr​  what is dbgview? where to find it?  Is there any log file in CEPA? I dont find any log

We tried CEE, but we want to use VCAPS but none of them worked.

I get every few second this HTTP PUTs in my endpoint so i guess endpoint is well configured but no audit data send:

info: Microsoft.AspNetCore.Hosting.Diagnostics[1]
      Request starting HTTP/1.1 PUT http://10.0.0.5:4300/api/vcaps - text/xml 38
info: Microsoft.AspNetCore.Routing.EndpointMiddleware[0]
      Executing endpoint 'HTTP: PUT /api/vcaps'
Received message vcaps: <RegisterRequest />
info: Microsoft.AspNetCore.Http.Result.OkObjectResult[1]
      Setting HTTP status code 200.
info: Microsoft.AspNetCore.Routing.EndpointMiddleware[1]
      Executed endpoint 'HTTP: PUT /api/vcaps'
info: Microsoft.AspNetCore.Hosting.Diagnostics[2]
      Request finished HTTP/1.1 PUT http://10.0.0.5:4300/api/vcaps - 200 0 - 132.6791ms
info: Microsoft.AspNetCore.Hosting.Diagnostics[1]
      Request starting HTTP/1.1 PUT http://10.0.0.5:4300/api/vcaps - text/xml 38
info: Microsoft.AspNetCore.Routing.EndpointMiddleware[0]
      Executing endpoint 'HTTP: PUT /api/vcaps'
Received message vcaps: <RegisterRequest />
info: Microsoft.AspNetCore.Http.Result.OkObjectResult[1]
      Setting HTTP status code 200.
info: Microsoft.AspNetCore.Routing.EndpointMiddleware[1]
      Executed endpoint 'HTTP: PUT /api/vcaps'
info: Microsoft.AspNetCore.Hosting.Diagnostics[2]
      Request finished HTTP/1.1 PUT http://10.0.0.5:4300/api/vcaps - 200 0 - 5.5903ms

It is a Microsoft tool. https://dell.to/4b5nkpg

and what should i do with this tool?

debugview show this:

[8636] [EMC CEE]: CMonitor::ExamineThreadFunc(): Event to Examine Source Attributes signaled
[8636] [EMC CEE]: CCurlWrapper::Send: Failed: 28: Operation timed out after 5015 milliseconds with 0 bytes received
[8636] [EMC CEE]: CHttpClient::SendRequestSync Failed
[8636] [EMC CEE]: CEPPAPIWrapper[Audit][xx][http://10.0.0.5:4300/api/cepp]::Register(): Failed [1722]: The RPC server is unavailable. 
[8636] [EMC CEE]: CMonitor::ExamineThreadFunc(): Event to Examine Source Attributes signaled
[8636] [EMC CEE]: CCurlWrapper::Send: Failed: 28: Operation timed out after 5015 milliseconds with 0 bytes received
[8636] [EMC CEE]: CHttpClient::SendRequestSync Failed
[8636] [EMC CEE]: CEPPAPIWrapper[Audit][xx][http://10.0.0.5:4300/api/cepp]::Register(): Failed [1722]: The RPC server is unavailable. 
[8636] [EMC CEE]: CMonitor::ExamineThreadFunc(): Event to Examine Source Attributes signaled

If my endpoint respone with <ResponseRequest /> CEPA logs errors and cant parse response:

[5820] [EMC CEE]: CMonitor::ExamineThreadFunc(): Event to Examine Source Attributes signaled
[5820] [EMC CEE]: CEndPoint::Init(): Parse error: expected <

You should call phone support with your isilon system.

We tried open support ticket about this but they dont know about this and remit just documentation of certified solutions with CEPA, can you provide some contact for TAP or this kind of integrations?