Scan Engine/Symantec Protection Engine is logging many errors such as "Decomposer Result ID = 26"

book

Article ID: 156444

calendar_today

Updated On:

Products

Protection Engine for Cloud Services Scan Engine AntiVirus for Caching Protection for SharePoint Servers Protection Engine for NAS

Issue/Introduction

Scan Engine/Symantec Protection Engine ("Scan Engine") is logging many "Decomposer Result ID = 26" errors.

 

Cause

There is more than one possible cause of Decomposer 26 errors

  • The in-memory file system was exhausted.
  • Insufficient resources on the server.

 

Resolution

To adjust the In-Memory file system settings: 

  1. Log in to the Protection Engine web UI. 
  2. Navigate to the Configuration - Resources page
  3. Adjust one of the settings for in-memory setting
    1. Increase the Maximum RAM used for in-memory files system.  
      1. Increase by increments 256 MB at a time.
      2. Can be set to a maximum of 2048 MB. Only recommend for systems with more than 4GB of RAM.
    2. Decrease the Maximum file size stored within the in-memory file system
      1. Decrease the file size be 5 MB.
      2. If one file consistently causes the error, make the setting smaller than that file. 
      3. Zero disables in-memory scanning.

If the above steps don't resolve the issue, run Perfmon while reproducing the problem:

Windows 2008

  1. Save the attached file SSE_PerfMon_Win2k8.xml to your local drive.
  2. On the taskbar click Start Run.
  3. In Open box, type:

    perfmon
  4. Click OK. A window named "Reliability and Performance Monitor" appears.
  5. In the left pane expand Data Collector Sets.
  6. Click User Defined.
  7. On the menu at the top, click Action New > Data Collector Set. A wizard called "Create new Data Collector Set" appears.
  8. Give the new data collector set a descriptive name, such as SPE and leave the default at Create from a template (recommended) then click Next.
  9. On the "Which template would you like to use?" page, click Browse... .
  10. Navigate to the SSE_PerfMon_Win2k8.xml file, select it, and click Open.
  11. If you'd like to save to a different drive, click Next and enter the preferred file path under the Root directory box and click Ok. Otherwise, click Finish.
  12. Now what should be visible is the following: Reliability and Performance -> Data Collector Sets -> User Defined view with a new counter named SPE.
  13. Right click the SPE log counter and click Start.

 

 

 

 

Attachments

SSE_PerfMon_Win2k8.xml get_app