How to install a SSIM Event Collector v4.3 or older on Windows 7, Windows 2008, Windows 2008 R2 or Windows Vista 64 bit operating Systems

Products

• Security Information Manager

Issue/Introduction

Symptoms
 

You have installed a SSIM Event Collector v4.3 or older and when you run the runliveupdate.bat in the collector you an exception similar to the one below:

Updating "windowseventlogcollector"......
ERROR: Exception caught while reading product catalog from C:\ProgramData\AppData\Symantec\Java LiveUpdate\Product.Catalog.LiveUpdate. Details:
java.io.FileNotFoundException: C:\ProgramData\AppData\Symantec\Java LiveUpdate\Product.Catalog.LiveUpdate (The system cannot find the path specified)

(OR)


ERROR: Exception caught while running liveupdate for msvistacollector[English].
Details:
java.lang.OutOfMemoryError: Java heap space
at java.util.Arrays.copyOf(Arrays.java:2882)
at java.lang.AbstractStringBuilder.expandCapacity(AbstractStringBuilder.
java:100)
at java.lang.AbstractStringBuilder.append(AbstractStringBuilder.java:390
)
at java.lang.StringBuffer.append(StringBuffer.java:224)
at com.symantec.management.applib.util.WorkingFolder.findWindowsCommon(W
orkingFolder.java:406)
at com.symantec.management.applib.util.WorkingFolder.loadLocations(Worki
ngFolder.java:248)
at com.symantec.management.applib.util.WorkingFolder.(WorkingFolder.<clinit>(WorkingFolder.java:69)
at com.symantec.management.applib.SESGetLogProviderInfo.getValueFromCIMO
M(SESGetLogProviderInfo.java:135)
at com.symantec.management.applib.SESInterface.fillMachineInfo(SESInterf
ace.java:588)
at com.symantec.management.applib.SESInterface.sendInit(SESInterface.jav
a:137)
at com.symantec.management.applib.SESInterface.clientInit(SESInterface.j
ava:109)
at jlua6.a(DashoA5380)
at com.symantec.liveupdate.JluToSesa.a(DashoA5380)
at com.symantec.liveupdate.JluToSesa.getConfigurationData(DashoA5380)
at jlua0.b(DashoA5380)
at jlua0.a(DashoA5380)
at com.symantec.liveupdate.JluConfiguration.a(DashoA5380)
at com.symantec.liveupdate.JluConfiguration.createConfiguration(DashoA53
80)
at com.symantec.liveupdate.LiveUpdate.startSession(DashoA5380)
at com.symantec.liveupdate.LiveUpdate.a(DashoA5380)
at com.symantec.liveupdate.LiveUpdate.main(DashoA5380)
at com.symantec.cas.ucf.liveupdate.InvokeJavaLiveUpdate.main(InvokeJavaL
iveUpdate.java:112)
Unable to update "msvistacollector": return code 1

 

Cause

SSIM Event Collectors v4.3 or older are not fully compatible with the Windows 2008 & Vista range of platforms in that the liveupdate funcionality is lost. There are no plans to retrospectively go back and update all of the older collectors to be fully compatible with these platforms, however there are two possible solutions to restore the liveupdate functionality. 1. Install a random SSIM Event Collector v4.4 and run liveupdate. This will update the collector framework and restore liveupdate functionality to the SSIM Event Collectors v4.3. The random v4.4 collector may be removed after the liveupdate. 2. It is possible to patch the SSIM Event Collector v4.3 install files as per the instructions below. You will need to patch the install files for every v4.3 collector you install on the agent machine.

Resolution

After you have installed Event Agent and want to install a SSIM Event Collector v4.3 or older you need to download the attached zip file which contains a patch and unpack the contents of the file into the "<collector name> \install" folder replacing existing the files when prompted. The files indicated below will be patched by the contents of the zip file.
 

install.bat
jluinstaller.jar
runliveupdate.bat
uninstall.bat

This procedure must be performed for every v4.3 or older event collector you install on the agent machine.

The next thing you must do is patch Java LiveUpdate to a compatible version of the Java client for the Operating System. You only need to perform this action once.

To patch the Java LiveUpdate for the collector:
 

1. Download the attached jlu.jar file.
2. Navigate to C:\Program Files(x86)\Common Files\Symantec Shared\Java LiveUpdate
3. Rename the jlu.jar file that currently exists in this directory.
4. Place the jlu.jar file you downloaded into this directory.

Then run the install.bat file from the " <collector name>\install" folder and install the collector, you should also be able to update the collector during installation without issue.