DataReel Reporting Agent for Linux Documentation Downloads

Troubleshooting

Start with the agent log. It has the result of the last report for each delivery method.

The log file

/var/log/drra/drra.log, and journalctl -u drra. Run drra once as root to get a fresh result right away, and drra config to see the settings in use.

Messages

MessageWhat to do
Registration status from server: pendingApprove the host on the admin page (check drra fingerprint), or set the enrollment token
key_mismatchThe host was reinstalled or its key changed. Delete its old registration on the admin page.
revokedAn admin revoked the host. Approve it again if that was a mistake.
bad_timestampFix the clock on the host or the server (chronyd); allowed difference: max_clock_skew_seconds
bad_tokenThe enrollment token in drra.ini does not match server.ini
bad_signatureThe request was changed on the way, or the key does not match the registration
Request to ... failed: SSL certificate problemThe host does not trust the server's certificate: install the CA in the system trust store or set ca_file
Request to ... failed: Could not resolve host or Connection refusedCheck host and port, DNS, and outgoing firewall rules
Unexpected answer from ... (HTTP 404)upload_path or register_path is wrong
NT_STATUS_...The CIFS copy failed: share name, credentials_file, or permissions on the share
Host key verification failedAdd the SCP server to known_hosts_file, or use accept-new once
Scan status failedRun drra scan to see the error: openscap-scanner missing, the feed cannot be downloaded, or the CSAF/VEX index is missing on the server
Hook skipped=The hook file or folder is not owned by root, or is group or world writable

Server side