There are many methods you can use to deploy ArcGIS Enterprise and ArcGIS Server on Amazon Web Services (AWS). This page describes ways to troubleshoot problems you may encounter with each deployment option.
Troubleshoot ArcGIS Enterprise Cloud Builder for Amazon Web Services
There are two folders under the Logs folder in the location where you extracted ArcGIS Enterprise Cloud Builder for Amazon Web Services and its associated files.
The Logs folder contains the following two subfolders:
- Log—This folder contains console logs, which are created every time you run the utility. The Log folder also contains CloudFormation event logs for each stack you create as part of deployment every time you run the CREATE command with the ArcGIS Enterprise Cloud Builder CLI for AWS utility or add a deployment in the ArcGIS Enterprise Cloud Builder for Amazon Web Services app.
- ErrorLog—This folder contains log files to record any errors that occur when you run the ArcGIS Enterprise Cloud Builder CLI for AWS utility or ArcGIS Enterprise Cloud Builder for Amazon Web Services app. Read these error logs for effective troubleshooting.
See the following two sections for information on specific errors you could encounter when running the Cloud Builder app or ArcGIS Enterprise Cloud Builder CLI for AWS utility. Both the app and utility launch CloudFormation stacks, so you should also read the section on troubleshooting CloudFormation stack creation to help identify and correct deployment problems.
Errors encountered when running the ArcGIS Enterprise Cloud Builder for Amazon Web Services app
The ArcGIS Enterprise Cloud Builder for Amazon Web Services app validates many of the values you provide as you use the app. Additional information is available in the log file locations mentioned in the previous section.
I receive a message that my domain name is invalid.
There are several reasons that Cloud Builder cannot validate your domain name, but the most likely cause is related to a missing or improper mapping of the domain name in your domain name server (DNS). For example, the domain name may not be mapped inside your DNS, or it may be mapped improperly.
Ensure that the domain name you provided resolves to a CNAME or A record in your DNS. To check whether the domain name you provided in Cloud Builder is properly mapped, use the nslookup command in a Microsoft Windows command prompt on the same machine where you are running the Cloud Builder app.
If you think your domain name mapping is correct, try clearing the local DNS cache on the machine where you are running Cloud Builder, and then validate the domain name again in the Cloud Builder app.
If your domain name still doesn't validate, contact your IT administrator for further support.
My deployment failed to create.
If the Cloud Builder app cannot create your deployment, error messages appear on the Cloud Builder job completion page. You can see further details about the errors by clicking View Process Log and View Error Log on the job completion page.
If you see a generic error such as Received FAILURE signal with UniqueId <unique-id>, check the Amazon CloudWatch logs by clicking the log URLs in the View AWS CloudWatch Logs section of the Cloud Builder summary page. This opens the appropriate CloudWatch log in your default web browser, where you can view logs for each Amazon Elastic Compute Cloud (EC2) instance in your deployment and determine the reason for the failure.
Once you determine what caused the failure, you can click Back in the Cloud Builder app to fix the required parameter and retry the deployment. Alternatively, you can delete the failed deployment and create a new one.
The ArcGIS Enterprise Cloud Builder for Amazon Web Services app continuously crashes and returns an error indicating ArcGIS Enterprise Cloud Builder for AWS has stopped working
If the ArcGIS Enterprise Cloud Builder for Amazon Web Services app crashes and returns the following error message: ArcGIS Enterprise Cloud Builder for AWS has stopped working. A problem caused the program to stop working correctly. Windows will close the program and notify you if a solution is available., your machine is likely missing the required Microsoft Visual C++ Redistributable package. See Cloud Builder prerequisites for more information and a link to download the package.
Where can I find the CloudWatch logs for deployments I create using the ArcGIS Enterprise Cloud Builder for Amazon Web Services app?
If the Cloud Builder app cannot create your deployment, it returns error messages on the job completion page. To see further details about the errors, click the View Process Log and View Error Log links on the job completion page.
Errors encountered when using the ArcGIS Enterprise Cloud Builder CLI for AWS utility
The following are some common messages or problems you may encounter when using the ArcGIS Enterprise Cloud Builder CLI for AWS utility and suggestions on how to correct them.
I receive a permissions error.
The user who runs the ArcGIS Enterprise Cloud Builder CLI for AWS utility must have recursive write access to the Logs and Output folders. Ensure these permissions have been granted.
I receive the message Cannot find file <file_name>.
You must place the JSON configuration files in the Configuration folder or one of its subfolders in your working directory; do not place the JSON configuration files in the Configuration folder available in the installation directory. If your configuration files were not in the Configuration folder in your working directory, move the files there and run the utility again.
I receive the message Invalid deployment configuration file extension. It must be '.json'.
The configuration file you use must have a .json extension. If it does not, rename it to include this file extension and run the utility again.
I receive the message Invalid JSON format for file <file_name>.
Ensure the configuration file contains valid JSON formatting.
Tip:
You can use a JSON validator such as JSONLint to validate formatting.
I receive the message Failed to access AWS account with provided credentials.
Make sure you provided valid AWS credentials in the JSON configuration file so that the utility can connect to AWS. If credentials are valid, be sure your account is accessible from the machine where you are running the ArcGIS Enterprise Cloud Builder CLI for AWS utility.
I receive an error saying access is denied when I run the ArcGIS Enterprise Cloud Builder CLI for AWS utility with the PREP command.
If you are using an existing Amazon Simple Storage Service (S3) bucket for your deployment files, be sure you have appropriate permissions to access and write to the bucket.
When I open the output file after running the ArcGIS Enterprise Cloud Builder CLI for AWS utility with the CREATE command, I do not see all the components I expected.
The output file created when you use the CREATE command contains headings for each component the utility created on AWS. These headings correspond to the nodes you included in your configuration JSON file. The nodes in the configuration file tell the utility which components to create. If you leave out a node from the configuration file, the utility will not create that component.
Each node you include in your configuration file must contain at least one parameter. Even if you set all the parameters under the "Default" node, you must include a node for every part of the deployment you want created and that node must contain at least one parameter and value. If a node is present in the configuration file but does not include a parameter, the utility skips that node. For example, you cannot set parameters for an ArcGIS GIS Server site in the "Default" node and place an empty "Server" node in the configuration file. If you do, the utility will not create the ArcGIS GIS Server site.
Check the configuration file to ensure you have added all required nodes and at least one parameter for each component of the deployment. See ArcGIS Enterprise Cloud Builder CLI for AWS parameters for a list of required parameters for each node in the configuration file.
When I run the ArcGIS Enterprise Cloud Builder CLI for AWS utility, the command prompt appears to stop running.
If you find the ArcGIS Enterprise Cloud Builder CLI for AWS utility or any utility you run in a Microsoft Windows command window stops running, disable QuickEdit Mode for the command window.
Troubleshoot AWS CloudFormation stack creation
ArcGIS Enterprise on Amazon Web Services deployment tools create AWS CloudFormation stacks. Use the AWS CloudFormation console to monitor the status of your AWS CloudFormation stack and detect whether stack creation fails. Sign in to the AWS CloudFormation console (which is part of the AWS Management Console) and open the Events tab to find information on stack creation, updates, and deletions. If the stack fails to create, information on the Events tab can provide an idea of what went wrong.
ArcGIS Enterprise on Amazon Web Services deployment tools that you create using CloudFormation templates provided by Esri have the Rollback on failure option enabled. With this option enabled, all virtual machines in the deployment are preserved even if the deployment fails to launch. This helps you troubleshoot issues. However, if you do not require this, you can sign in to the AWS CloudFormation console and disable the Rollback on failure option.
When you create a deployment using CloudFormation templates provided by Esri, all deployment logs are exported to Amazon CloudWatch Log service. The following is a summary of how to view the deployment logs:
- Sign in to the AWS CloudFormation console and access the CloudFormation service.
- Click the CloudFormation stack for which you need to view logs.
- Click the Resources tab and look for the DeploymentLogs logical ID.
- Click the deployment log link (Physical Log ID) next to DeploymentLogs.
The link opens the CloudWatch logs in a new browser tab.
Deployment logs are stored as a log group in Amazon CloudWatch Log service. In the log group, you will find multiple log streams with names that end with /stderr and /stdout. Refer to all log streams to determine the cause of the failure.
Refer to the AWS help for information about Amazon CloudWatch logs.
Tip:
These logs are also stored on the EC2 instance. On Microsoft Windows instances, you can find these logs in the C:\cinc folder. On Ubuntu Server instances, you can find these logs in the /var/logs directory.
Where can I find the CloudWatch logs for deployments I create using ArcGIS Enterprise on Amazon Web Services deployment tools?
To access CloudWatch logs for deployments you create with ArcGIS Enterprise on Amazon Web Services deployment tools, sign in to the CloudFormation console, which is part of the AWS Management Console. See the summary above and View CloudFormation Logs in the Console on the AWS website.
Errors encountered when launching an AWS CloudFormation stack
The following are some common messages or problems you may encounter when you deploy using an AWS CloudFormation template and suggestions on how to correct them.
Why do I see an error about insufficient capacity when I click Launch to launch an instance?
This is an error from Amazon Elastic Compute Cloud meaning that it does not have the available capacity to meet your request for a new instance. If your deployment architecture permits, you may be able to work around this error by requesting an instance in a different availability zone or allowing EC2 to choose the availability zone for you. Other options are to try launching a different size of instance or launching the instance later.
What does the message Unable to connect to WebAdaptor URL : https://agsportalssl.esri.com/server/webadaptor in the catalina.out log file mean?
If you see this message in the catalina.out log file on an Ubuntu instance, ensure the SSL certificate in the deployment S3 bucket is valid and in PKCS 12 format. Also be sure the provided SSL certificate password is correct.
What does the message OpenSSL::PKCS12::PKCS12Error: PKCS12_parse: mac verify failure in the log file mean?
If you see this message in the log file on a Windows instance, ensure the SSL certificate in the deployment S3 bucket is valid and in PKCS 12 format. Also be sure the provided SSL certificate password is correct.
What does the message Failed to create the site. The configuration store location contains server configuration files that are being used by another site in the SSM automation log mean?
One probable cause is you are using a shared file server that contains a folder with the same deployment name that you are trying to create. Either use a different name for the new deployment or, if you deleted the previous deployment that used that folder, delete that folder that has the same deployment name from the shared file server before you create the new deployment.