What is the RESTApi limit for moving clients and selecting large data sets sent to the SEMAPISRV service

Products

• Endpoint Protection

Issue/Introduction

You attempt a custom RESTApi script that selected a large number of objects,  but you get a error 500 'Access Denied'. 
when you reduce the number of objects to select or manipulate the job succeeds.

In the Symantec Endpoint Protection Manager error logs when set to SCM.LOG.LOGLEVEL=Finest you will see the following error. *


### Cause: com.microsoft.sqlserver.jdbc.SQLServerException: The incoming request has too many parameters. The server supports a maximum of 2100 parameters. Reduce the number of parameters and resend the request.

; uncategorized SQLException

; SQL state [S0001]; error code [8003]

; The incoming request has too many parameters. The server supports a maximum of 2100 parameters. Reduce the number of parameters and resend the request.; nested exception is com.microsoft.sqlserver.jdbc.SQLServerException: The incoming request has too many parameters. The server supports a maximum of 2100 parameters. Reduce the number of parameters and resend the request.

###

Environment

Windows Server and SEPM all versions.

Cause

Microsoft SQL does not support the RESTAPI table/Inludes selection of more than 2100 objects.

https://stackoverflow.com/questions/23045912/the-incoming-request-has-too-many-parameters-the-server-supports-a-maximum-of-2

Note: Microsoft does not list this limitation on a Technet / Communities page.

Resolution

At this time it is recommended to parse out large requests and limit them to 1500 object jobs.   It has been noted that the Symantec Endpoint Protection Manager shares the ram used by the RESTApi job with the SEMSRV.EXE process. Repeated large RESTApi jobs can lead to performance issues.

Additional Information