cancel
Showing results for 
Search instead for 
Did you mean: 
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 11 of 42

Re: Event Parser fails to start

The first step is to check the relevant log files. I would suggest enabling debug logging as described in KB52369 , and then restarting the ePO services (since we are interested in what happens when the service tries to start.) Then check the logs for any errors - feel free to zip and attach them here if you want us to take a look.

HTH -

Joe

timexy
Level 7
Report Inappropriate Content
Message 12 of 42

Re: Event Parser fails to start

I am having the same issue. Everything wroked like a charm for 4 months, but now McAfee ePolicy Orchestrator 4.6.2 Event Parser won't start.

Here is the error related to that on the Orion log:

2012-08-16 12:57:27,554 WARN  [Thread-1] jni.LoadJniInitTask  - Unable to load native library:C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\extensions\installed\EPOCore\4.6.2.234\webapp/WEB-INF/lib/epojni java.lang.UnsatisfiedLinkError JNI_OnLoad returned an error.

2012-08-16 12:57:58,505 WARN  [Thread-1] jni.LoadJniInitTask  - Unable to load native library:C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\extensions\installed\EPOCore\4.6.2.234\webapp/WEB-INF/lib/RuleEngJNI java.lang.UnsatisfiedLinkError JNI_OnLoad returned an error.

2012-08-16 12:59:05,054 WARN  [Thread-1] jni.LoadJniInitTask  - Unable to load native library:C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\extensions\installed\RepositoryMgmt\4.6.2.234\webapp/WEB-INF/lib/RManJNI java.lang.UnsatisfiedLinkError JNI_OnLoad returned an error.

And here is eventparser.log:

20120816133002 I #09596 EVNTPRSR Initializing Server...

20120816133002 I #09596 EVNTPRSR Database initialization: Starting.

20120816133002 I #09596 NAISIGN  RSA BSAFE Crypto-C Micro Edition FIPS 140-2 Module 3.0.0.1

20120816133034 E #09596 EPODAL   COM Error: 0x80004005

20120816133034 E #09596 EPODAL   File: .\ePOData_Connection.cpp(494)

20120816133034 E #09596 EPODAL   Function: DAL2_CConnection::GetConnection

20120816133034 E #09596 EPODAL   Source: Microsoft OLE DB Provider for SQL Server

20120816133034 E #09596 EPODAL   Description: [DBNETLIB][ConnectionOpen (Invalid Connection()).]Invalid connection.

20120816133034 E #09596 EPODAL   COM Error: 0x80004005

20120816133034 E #09596 EPODAL   File: .\ePOData_Connection.cpp(525)

20120816133034 E #09596 EPODAL   Function: DAL2_CConnection::GetConnection

20120816133034 E #09596 EPODAL   Source: Microsoft OLE DB Provider for SQL Server

20120816133034 E #09596 EPODAL   Description: [DBNETLIB][ConnectionOpen (Invalid Connection()).]Invalid connection.

20120816133034 E #09596 EPODAL   COM Error: 0x80004005

20120816133034 E #09596 EPODAL   File: .\ePOData_Connection.cpp(309)

20120816133034 E #09596 EPODAL   Function: DAL2_CConnection::Init

20120816133034 E #09596 EPODAL   Source: Microsoft OLE DB Provider for SQL Server

20120816133034 E #09596 EPODAL   Description: [DBNETLIB][ConnectionOpen (Invalid Connection()).]Invalid connection.

20120816133034 E #09596 EPODAL   DAL2_CConnection::Init: Error 0x80004005 returned from credentials callback. Database NOT available

20120816133034 E #09596 EVNTPRSR Database initialization: Failed (hr=0x80004005).

20120816133034 E #09596 EVNTPRSR Failed to initialize database layer. Cannot continue.

20120816133034 I #09596 EVNTPRSR EventParser Stopped.

20120816133034 I #09596 EVNTPRSR Cleaning up Server...

Appears to be something SQL related. The SQL is running, and it's the version bundled with the ePO Installation.

Message was edited by: timexy on 8/16/12 11:43:29 AM CDT

Re: Event Parser fails to start

i had this issue with the 4.6.1 to 4.6.2 epo upgrade. i could log into ePO,but the agent handler part was busted.

At that time I only had one agent handler.

Support helped me sort it out....corrupted Apache libraries...we copied them from my test ePO server and things just came to life.

Since then, i added an agent handler, so at least machines can be managed if it happens again.

Yes it`s scary when ePO doesn`t start, but it`s worth fixing...else deal, with DB restores and getting the EXACT version of extensions installed...it can be a real pain...call support...say it`s urgent...they`ll help you..

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 14 of 42

Re: Event Parser fails to start

Definitely SQL authentication related. Can you restart all three ePO services, wait a minute, then zip up and attach a copy of orion.log, server.log and eventparser.log?

This looks very much like a standard authentication failure - check that the credentials specified in the config-auth page are correct.

Have you recently changed the password for the account used to install ePO? That's a common cause...

HTH -

Joe

Highlighted
timexy
Level 7
Report Inappropriate Content
Message 15 of 42

Re: Event Parser fails to start

Thanks Joe, but it turned out to be a SQL Port problem. For whatever reason the instance was using Dynamic Ports, so I followed this Microsoft documentation to "fix" it: http://msdn.microsoft.com/en-us/library/ms177440.aspx

The strange part is that the server has rebooted some times in between these 4 months but this problem never occurred before.

on 8/17/12 8:12:45 AM CDT

Re: Event Parser fails to start

My Epolicy Orchestrator event parser failed to start the services can you help me guys? please see details below

20120822095128          E          #02432          EPODAL            DAL2_CConnection::Init: Error 0x80070002 returned from credentials callback. Database NOT available

20120822095128          E          #02432          EVNTPRSR          Database initialization: Failed (hr=0x80070002).

20120822095128          E          #02432          EVNTPRSR          Failed to initialize database layer. Cannot continue.

20120822095128          I          #02432          EVNTPRSR          EventParser Stopped.

20120822095128          I          #02432          EVNTPRSR          Cleaning up Server...

Re: Event Parser fails to start

I am guessing that your database is unavailable 🙂

As per above posts, check the /core/config page and test connectivity.  If fails, troubleshoot DB / network

Re: Event Parser fails to start

i have checked my SQL 2005 even from the serivces and it is running  only the Epolicy Event Parser services is the only one which is not running

Re: Event Parser fails to start

Run DB connectivity test (/core/config) as per my post 14-Aug-2012 10:50, if fails, check SQL port is listening (netstat) - the service may be running but that doesnt neccessarily mean that DB connectivity is working.  If it works (dont think it will from the logs), then enable further debugging as per Joes post above.

Re: Event Parser fails to start

yes there are clients listening

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community