cancel
Showing results for 
Search instead for 
Did you mean: 

EPO 5.0.1 - the Local Event Parser service is not running

Hi,

Happy New Year!

I'm having some issues with ePolicy Orchestrator 5.0.1. Everything was working just fine, but now everytime I'm launching ePolicy Orchestrator, I get the following message "The Local Event Parser service is not running" and "A database error occured while getting licence informations. Make sure your database server is currently running".

The Event Parser service is stopped and when I try to start it, it fails.

The AppacheSrv service is running. I tried to restart it and to start the Event Parser service but nothing changed.

I don't know what to do, do you have some ideas?

Thanks.

7 Replies

Re: EPO 5.0.1 - the Local Event Parser service is not running

did you install a license key to the ePo?

Message was edited by: ron.wintrob on 1/13/14 3:29:23 AM CST

Message was edited by: ron.wintrob on 1/13/14 3:29:53 AM CST

Re: EPO 5.0.1 - the Local Event Parser service is not running

Yes, I have installed a license which was valid until April 2014.

Re: EPO 5.0.1 - the Local Event Parser service is not running

is your SQL service up and can you access/ping  the SQL server? or localy via SQL studio?

Message was edited by: ron.wintrob on 1/13/14 4:13:11 AM CST
rgc
Level 11
Report Inappropriate Content
Message 5 of 8

Re: EPO 5.0.1 - the Local Event Parser service is not running

Hi Rbaranger,

Please check the : https://community.mcafee.com/message/313142#313142

Regards,

RGC

Highlighted
haaris
Level 10
Report Inappropriate Content
Message 6 of 8

Re: EPO 5.0.1 - the Local Event Parser service is not running

Check whether sql service is running or not????if yes check whether you are able to login to database locally from management studio or not.....

newag
Level 7
Report Inappropriate Content
Message 7 of 8

Re: EPO 5.0.1 - the Local Event Parser service is not running

Hello I have similar issue with Event Parser. Service won't start with following warn: mcafee event parser started then stopped... Cause of this issue is mismatch SQLServer TCP/IP port in McAfee configuration. I resolved this issue in the following way:

- run cmd.exe and enter netstat -an

- find sqlserver.exe and check listening port

- other method to find TCP/IP port in MSSQL 2008 is registry editor:

go to branch: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQLServer\SuperSocketNetLib\Tcp\IPAll and look for value at TcpDynamicPorts attribute (this value is your TCP/IP port of SQLServer)

- run your favourite browser and enter mcaffe epo address for example: https://mcafee:8443/core/config-auth then provide your credentials

- now check whether Database server port in your epo config is matching with sqlserver.exe TCP/IP port (in registry or netstat as I describe above)

- if port doesn't match - change it in epo configuration apply and restart your server

Re: EPO 5.0.1 - the Local Event Parser service is not running

In my case it's HIPS (Firewall was enabled), I've been able to load Admin console, got error license not valid but able to sort that out, seen that several times, then move the server to my removal task group, enabled HIPS removal task and remove HIPS on the server. Move it back to the normal destination and disabled all HIPS policy/client task on that group. Now update all software and install hotfix EPO510HF1b.

Lesson to learn: Always backup your server, backup all Task and Policy if possible daily with incremental backup!