The SEDR dashboard and event search stop showing data

Products

• Advanced Threat Protection Platform
• Endpoint Detection and Response

Issue/Introduction

The Symantec Endpoint Detection and Response (SEDR) dashboard and event search stop showing events from the SEPM database even though the connection shows as healthy.

Environment

Release : 4.4.0

Component :

Cause

In some situations socket error while querying and reading from the database caused SEDR to be unable to open the socket required for reading from the SEPM DB.

Resolution

Broadcom Engineering resolved this issue in version 4.5.0. Please update to the latest build to receive this fix.

As a temporary workaround, rebooting the SEDR appliance will resolve this issue.