Automation Engine produces U00015006 System forced memory trace dump due to CrowdStrike Falcon Sensor interference

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

The Automation Engine Work Processes (WPs) experience unexpected crashes, resulting in the following symptoms:

• Log messages: U00015006 System forced memory trace dump.
• Automation Engine messages are placed in quarantine.
• General application instability or unresponsiveness.
• Evidence in system logs of module umppc20403 interacting with ucsrvjp.jar file

Environment

CA Automic Workload Automation - Automation Engine Version: 24.x on  Windows with Security Software: CrowdStrike Falcon Sensor

Cause

The CrowdStrike Falcon Sensor module umppc20403 interferes with the Automation Engine Work Processes. 

Resolution

To resolve this issue, configure CrowdStrike to exclude the Automation Engine installation directory and its processes from real-time monitoring.

1. Identify the installation path of the Automation Engine (e.g., C:\Automic\Automation.Engine\bin).
2. Add an exclusion for the entire folder in the CrowdStrike Falcon console.
3. Ensure specific executables such as ucsrvwp.exe, ucsrvcp.exe, and ucsrvjp.jar are explicitly excluded from behavioral or memory scanning.
4. Restart the Automation Engine services to ensure no lingering hooks remain.