SSIM Event Agent stops periodically

Article Id: 156152

Status: Published

Updated On: 29-03-2012 06:45

Legacy Id: TECH185090

Products:

Security Information Manager

Issue/Introduction:

Customer reported that Symantec Event Agent stops every couple of days

In the Event Agent\collectors folder there are numerous hs_err_pid****.log files created

sesa-agent.log

ERROR [LuProviderProperties] Exception in decryptHexStringToString: java.lang.SecurityException: JCE cannot authenticate the provider SunJCE

hs_err_pid****.log
# A fatal error has been detected by the Java Runtime Environment:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x6de211f7, pid=2196, tid=900

AgentStart.log

Wed Feb 01 16:28:51 2012
Symantec Event AgentStart Service is starting...
Wed Feb 01 16:28:52 2012 FATAL: Cannot start the agent manager service
Thu Feb 02 08:51:17 2012 ***Error: JVM terminated abnormally; forced to kill process, sec = 60
Thu Feb 02 08:51:20 2012

Cause:

Customer confirmed that this has been caused by hardware memory issue cause by one defective RAM module

Resolution:

When above errors are observed please instruct the customer to run full hardware diagnostic test on the machine that SSIM event agent is running.