Limited or No New Events In Console and Growing Backlog After Nightly Maintenance

Products

• Carbon Black App Control

Issue/Introduction

• Limited (or no) new Events showing in Reports > Events.
• Sudden (and dramatic) spike in Agent Backlog.
• What's Executing Now shows Parent Queries still running for one of the following:

  CREATE PROCEDURE dbo.DeleteOrphanedFilenames
  CREATE PROCEDURE dbo.PruneOrphanedAntibodies

• The following query in SQL Server Management Studio returns a Value of 1 for at least one task

  USE das;
  SELECT name, value, date_modified FROM dbo.shepherd_configs (NOLOCK) WHERE name LIKE '%MaintenanceInProgress';

Environment

• App Control Server 8.11.0+

Cause

This issue is being investigated by Engineering under EPCB-24878 & EPCB-24869 and will be addressed with a future release of the Server.

Resolution

1. Restart the Reporter service to terminate any Maintenance Tasks.
2. Run SQL Server Management Studio as the Carbon Black Service Account
3. Execute the following query to fully reset any lingering Maintenance Flags

   USE das;
   EXECUTE dbo.UpdateMaintenanceFlags @antibodyMaintenanceInProgress = 0, @namesMaintenanceInProgress = 0;

Additional Information

If the issue persists, open a case with Support and provide:

• Results of What Is Executing Now
• Server Historical Logs
• Database Performance Logs