I have an issue with SIEM in ESM 11.1.3 and the issue is once i go to the dashboard it shows EC3014 Unable to connect to the Query Management Service. Please check that all services are up and running.
Could you please reply on how to solve this issue. in addition i already open ticket buy no one is helping.
need your immediate support
@achagovec No, Unfortunately it is not resolved yet. The latest patch number is 13 now and I applied it on my device, but it still occurs.
I opened a ticket but it didn't help either.
Restarting the "jobengine" service looks like helping sometimes..
Today I had this issue again with my ESM 11.3.0 patched HF12 and "service jobengine restart" saved me one more time.
I have been testing version 11.3.1 and 11.3.2 they seem stabilized about this issue.
For your information,
Yes. 11.3.x versions with the latest patch should resolve this issue as we have added a lot of fixes.
This issue also depends on whether you have a cluster setup.
You may want to check if there is an latency between the Management node & the Replica node as well as the network bandwidth.
'service jobengine restart' from the CLI of the Management node can be used as a temporary workaround.
For executing any commands on the CLI, we would recommend to contact McAfee Technical Support team by opening a service request.
You can test 11.3.x versions with the latest patch in your test environment before deploying it.
11.4.0 version will also be released soon.
Prashanth B Pillai
McAfee Technical Support
Customer Success Group