Follow

FTK will not perform AA

Created by: Chris Mach
Created date:
Last Updated date:

Problem

When performing Additional Analysis on cases that were created before applying patch 5 for Summation 5.6.3, the error message below appears:

"Unable to locate Distributed Processing Engine on Localhost"

Loose data can still be added to the case using FTK without a problem.

 

Resolution

In earlier versions of FTK, the file “proc_mgr_file.txt” was used.  Now with patch 5 the file name is called Owner_Info.XML

The Owner_Info.XML file contains information that is different from the proc_mgr_file.txt file.

<?xml version="1.0"?>

<case_owner_info version="1.0"><creator shortVers="5.6" version="5.6.1.55">AccessData&#xAE; Forensic Toolkit&#xAE;</creator><id>16</id><database alias="SQL\EDISCO"><host>SQL\EDISCO</host><port>-1</port><dbsystem>MSSQL</dbsystem></database></case_owner_info>

The Owner_Info file contains the name of the SQL Server and FTK Case ID

The proc_mgr_file.txt file, it may contain the name of the DPM Server or LocalHost.

 

  1. Make sure the Owner_Info.XML is present. Not every case will have this.  This file will show up if items are added to a case using FTK.
  2. If this is in a DPM configuration, make sure “LocalHost” is added to the list of servers in the Distributed Manager Configuration page.

 

Was this article helpful?
0 out of 1 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk