SSIM Event Agent stops periodically

Products

• Security Information Manager

Issue/Introduction

Customer reported that Symantec Event Agent stops every couple of days

In the Event Agent\collectors folder there are numerous hs_err_pid****.log files created

sesa-agent.log

ERROR [LuProviderProperties] Exception in decryptHexStringToString: java.lang.SecurityException: JCE cannot authenticate the provider SunJCE

hs_err_pid****.log
# A fatal error has been detected by the Java Runtime Environment:
#
#  EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x6de211f7, pid=2196, tid=900

AgentStart.log

Wed Feb 01 16:28:51 2012
Symantec Event AgentStart Service is starting...
Wed Feb 01 16:28:52 2012 FATAL: Cannot start the agent manager service
Thu Feb 02 08:51:17 2012 ***Error: JVM terminated abnormally; forced to kill process, sec = 60
Thu Feb 02 08:51:20 2012

 

Cause

Customer confirmed that this has been caused by hardware memory issue cause by one defective RAM module

Resolution

When above errors are observed please instruct the customer to run full hardware diagnostic test on the machine that SSIM event agent is running.