Multiple errors after unexpected power loss to EDR appliance
Article ID: 190481
Updated On:
Products
Endpoint Detection and Response
Issue/Introduction
After unexpected power outage, Endpoint Detection and Response (EDR) appliance console displays multiple errors. Navigation through the EDR appliance console is very slow to unresponsive.
1. On certain screens (using Chrome browser), EDR will show "Waiting for available socket..."
2. On Dashboard> Event Activity page EDR shows an error "An error occurred."
after clicking on the enrolled endpoint "no data available"
3. After clicking on a device_name from an Event, getting 'Endpoint: null'
4. 'File: null" after clicking on a detected file o, it will give an error page:File details page not found_Symantec EDR is unable to find this file's details in its database. However, the file may exist on endpoint. Click the following link to perform an endpoint serach based on the file's SHA2.
5. "Device is encountering a large number of events. Some events will not be logged to the database"
1. On certain screens (using Chrome browser), EDR will show "Waiting for available socket..."
2. On Dashboard> Event Activity page EDR shows an error "An error occurred."
after clicking on the enrolled endpoint "no data available"
3. After clicking on a device_name from an Event, getting 'Endpoint: null'
4. 'File: null" after clicking on a detected file o, it will give an error page:File details page not found_Symantec EDR is unable to find this file's details in its database. However, the file may exist on endpoint. Click the following link to perform an endpoint serach based on the file's SHA2.
5. "Device is encountering a large number of events. Some events will not be logged to the database"
Resolution
To correct the corruption leading to these multiple errors, re-install the EDR appliance software.
Feedback
Yes
No
Powered by
