Showing results for 
Search instead for 
Did you mean: 

segfault when trying to enable autolearn

Hi all!

Have a SIEM running 9.6.0 MR 4.

Have added a syslog data source that is running syslog-ng so I want to enable autolearn to pick up all the subordinate hosts.

When I try and enable it, it fails to enable and I get this error in the GUI:

And around the same time I see this or similar in /var/log/messages:

asp-test[9235]: segfault at 4 ip 00007efef57b776d sp 00007efeebffe720 error 4 in[7efef5785000+82000]

Anyone have any clues what's going on here? Solution?

1 Reply
McAfee Employee andy777
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: segfault when trying to enable autolearn

Step 1. Upgrade (I hate to sound like the support's broken record, but there's much better places to be than MR4). 9.6.1 at least and then how does it look?

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center