Scan Engine is sending e-mail alerts notifying administrators with the following message:
"The scanning feature seems to be hung or the scan engine is overloaded"
Message "The scanning feature seems to be hung or the scan engine is overloaded" sent in E-Mail notifications.
The message may be also found in Scan Engine local log file.
Symantec Scan Engine 5.2 introduced a new feature which periodically (every 60 seconds) checks whether Scan Engine is responsive and able to process scan requests. Typically, this Warning is a sign that the Symantec Scan Engine process is out of threads and had to queue up new incoming requests.
The following are the most common causes for this Warning to be generated:
Please note that this Warning may be seen even under heavy load conditions affecting the server on which Scan Engine is installed, regardless of the amount of scan requests.
Below is an excerpt of the self-test scanning feature description from the product's Implementation Guide (page 229):
Some potential solutions could be as simple as increasing the Number of available threads for scanning, to adding one more Symantec Scan Engine server to help alleviate the scan load from the potentially overloaded server.
Below is a list of areas to investigate and that could cause the Warning to be logged:
To further troubleshoot this message, please contact Symantec Support.
The self-test scanning feature may also be manually disabled by following the steps below.
NOTE: Disabling the Symantec Scan Engine selfscantest is not recommended.
It provides an early warning to the possibility of Scan Engine being overloaded.
To disable selfscantest at a Windows cmd prompt
To disable the Symantec Scan Engine selfscantest at a Linux or Solaris shell prompt
E-Mail (SMTP) alerts must be configured in Scan Engine to receive notifications.