Symantec WSS importer does not complete

Products

• Information Centric Analytics

Issue/Introduction

The Symantec WSS import utility runs without completing and without failures. This can occur in an environment in which the importer was previously running successfully or in which it has never before run.

Cause

When the WSS integration is initially configured, the Symantec WSS Integration section of the Symantec ICA Integration and Solution Accelerator Guide directs the user to set the MaxDaysToDownload setting to a default value of 7 as part of the initialization script. Because a watermark value is not initially set, the first run of the importer will attempt to pull events for the previous 7 days. Once that process completes, it will set a watermark value for use the next time the importer runs.

If the import process is interrupted for any reason - including the user pressing CTRL+C or terminating the command prompt - downloaded files will remain in the download folder (as specified in the dbo.Application_Settings table in the DownloadFolder column) to await processing. If a DownloadFolder value is not specified, it defaults to saving these files in the directory containing the importer executable.

Each time the importer runs, it will attempt to download and re-process existing downloads independent of what the Watermark and MaxDaysToDownload values might be. As a result, subsequent changes to these fields won't be honored by the importer until it has cleared the unprocessed downloads. In an environment in which a large number of events have been generated, this can result in exceptionally long processing times.

Resolution

1. Ensure the WSS importer is not running.
2. Delete all .gz files from the directory DownloadFolder directory
   NOTE: After deleting the .gz files, only the following files should be present in that folder:
3. Open SQL Server Management Studio (SSMS)
4. Connect to the Database Engine hosting the SymantecWSSDW relational database
5. From the File menu, select New > Query with Current Connection
   A new query editor window will open
6. Copy the following statement block and paste it in the query editor window:

   UPDATE SymantecWSSDW.dbo.Application_Settings
   SET    MaxDaysToDownload = 1;
   GO
   
   UPDATE SymantecWSSDW.dbo.Application_Settings
   SET    Watermark = GETDATE()-1;
   GO

7. Execute the statement block by pressing the F5 key, clicking the Execute button in the SQL Editor toolbar, or selecting Execute from the Query menu
8. Re-run the importer