Console receiving events: Error Processing host[hostId] ERROR_MESSAGE:Incorrect syntax near '-'.

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

After upgrading to 8.7.0 App Control Server, the console starts receiving thousand of the following events:

Subtype: Server Error
Description: Error Processing host[hostId] ERROR_MESSAGE:Incorrect syntax near '-'.

 

Environment

• App Control Server: 8.7.0 only

Cause

This behavior is caused by the existence of multiple backlog processing threads (e.g. ProcessFileInstances1, ProcessFileInstances2, ProcessFileInstances3)

Resolution

1. Upgrade to 8.7.2 or higher App Control Server
2. For instances that must remain on 8.7.0 App Control server version perform these steps:
   1. Login to the App Control SQL server where DAS database is running
   2. Confirm there is a recent full backup of the das database
   3. Open a Support Ticket to Request Fix870CloneThread.sql script
   4. After the script is received go to - https://<APPCSERVER>/Support.php > Scheduled Task tab > Confirm ProcessFileInstancesClones task is enabled
   5. Stop the CB App Control Reporter Service
   6. Open SQL Mgmt Studio and execute the hotfix > Fix870CloneThread.sql
   7. Start CB App Control Reporter Service

Additional Information

• In some cases the Server Backlog is increasing due to events amount caused by this issue
• This issue is only affecting Virtual Machines Environment