Skip to main content

Troubleshooting

This article contains solutions and instructions for troubleshooting common problems when setting up the OPC UA extractor to push. We recommend accessing the server through the UAExpert tool.

This assumes that you have first run the configuration tool as described in the configuration settings.

Unable to connect to the server​

If the extractor isn't able to connect to the OPC UA server, try these solutions.

Unable to connect to discovery server​

If you get the error message Unable to connect to discovery server, make sure that you have specified the correct endpoint-url in the configuration file and that it's possible to connect to the server from where the extractor is running.

Also, try connecting with UAExpert to verify that you can connect to the server.

Identity token rejected​

If you get the error message "Identity token rejected" when starting the extractor, verify that you have specified the correct username/password.

Certificate untrusted​

If you get the error message "Identity token rejected" when starting the extractor, try setting source.auto-accept to true to resolve the issue.

OPC UA uses a system of server/client certificates. This error message means that the server doesn't trust the client certificate. The server software typically has a system to accept incoming connections, but the system is application specific.

Similar errors are also produced if the extractor rejects the server.

The extractor hangs during startup, then loses connection​

This typically occurs if the server can't handle a high load. Try to inspect what the extractor was doing as it crashed, then reduce source/browse-nodes-chunk, source/browse-chunk, source/attributes-chunk, or source/subscription-chunk in the configuration file.

Alternatively, increase source/keep-alive-interval.

There was an issue with the certificate or SHA1 signed certificates aren't trusted​

This is an issue with the server certificate unless a custom client certificate is being used.

By default, SHA1 server certificates are considered insecure. As a workaround, you can set <RejectSHA1SignedCertificates>false</RejectSHA1SignedCertificates> under SecurityConfiguration in opc.ua.extractor.Config.xml.

You can also set source.ignore-certificate-issues to true.

Certificate doesn't meet the minimum key length requirement​

This is an issue with the server certificate unless a custom client certificate is being used.

Either increase the key length of the server certificate or adjust MinimumCertificateKeySize under SecurityConfiguration in opc.ua.extractor.Config.xml.

You can also set source.ignore-certificate-issues to true.

Usage of certificate isn't allowed​

This is an issue with the server certificate unless a custom client certificate is being used.

The server certificate lacks the data-encipherment usage flag. This is required by the OPC UA standard.

As a workaround, you can set source.ignore-certificate-issues to true.

Bad or missing data​

If the extractor isn't able to retrieve all data or receives data in the wrong format from the OPC UA server, try these solutions.

I don’t get any time series​

First, make sure that the server has variables that can be mapped to time series. In UAExpert, these show up as green labels.

Next, try to set extraction/data-types/allow-string-variables to true. This may cause time series you would rather have as numeric to appear as string. See My time series are string-valued but should be numerical.

If the time series are still missing, the issue is most likely related to their dimensions. By default, the extractor requires that variables are either Scalar or OneDimensional. If you have arrays in your server, they must be fixed size and define the ArrayDimensions attribute. Try setting extraction/data-types/unknown-as-scalar to true. This will help if the variables have ValueRank equal to Any or OneOrMoreDimensions, in which case they will be treated as scalar.

If variables still doesn't appear, check to make sure you haven't filtered them out in any way.

Time series are string-valued but should be numerical​

This is generally a question of their OPC UA data type. The extractor tries to guess which mapping makes the most sense but doesn't always succeed.

First, try setting extraction/data-types/auto-identify-types to true.

Next, try setting extraction/data-types/null-as-numeric to true. This will treat variables with null DataType as numeric variables. Do this only if you are sure none of these should be string values. If this is the case, either filter these out or contact the server administrator. Unknown data types aren't supported by the extractor, except with this workaround.

You can find the data type in UAExpert on the right side after selecting a variable.

Some metadata appears as time series​

Variables in OPC UA are mapped to time series, while properties are mapped to metadata. Sometimes the server will have variables that represent metadata. To map these over, you can use extraction/transformations to select the nodes you want as metadata.

Last updated