cancel
Showing results for 
Search instead for 
Did you mean: 
Fademidun
Level 10
Report Inappropriate Content
Message 1 of 20

McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

Powered down server for Memory upgrade and this service refused to start after powered back up, done everything and need someone with similar experience to advise/guide to get this working as it stand, we can't load/connect to ePO admin console. Error page cannot be found (https://<servername>:8443/core>

This was working just fine rebooted several times???

SQL 2008 SP2x64

Service name: MCAFEEEVENTPARSERSRV


If you need me to post orion.log content, will be happy to do it


Thanks

1 Solution

Accepted Solutions

Re: Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

Found it

On Local PC open C:\Program Files\McAfee\Host Intrusion Prevention\McAfeeFire.exe

Which will open the console:

Click on Tasks and Unlock and you will be prompted for the password: default is (abcde12345)

Once the password is entered correctly you should be able to uncheck prevention in all settings:

or you can uninstall the features

19 Replies
ansarias
Level 13
Report Inappropriate Content
Message 2 of 20

Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

Hello,

you can able to access ePO console even if event parser service is not running, Check if remaining ePO services and SQL are running.

Fademidun
Level 10
Report Inappropriate Content
Message 3 of 20

Re: Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

Hi All services are started except this particular one. see screen shot attached

ansarias
Level 13
Report Inappropriate Content
Message 4 of 20

Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

(https://<servername>:8443/core>

When you use above link to open ePO what error are you getting, and also paste orion.logs...

Fademidun
Level 10
Report Inappropriate Content
Message 5 of 20

Re: Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

The page timed out

Log below:

2014-09-15 09:34:15,836 WARN  [main] base.Database    - database startup attempt (11 of 12) failed; sleeping for 10000 milliseconds and will try again...

2014-09-15 09:34:46,848 ERROR [main] core.OrionCore   - Failed to read the server's multi-tenant mode property (is there a multi.tenant.mode record in the OrionServerProperties table?)

java.sql.SQLException: Network error IOException: Connection timed out: connect

  at net.sourceforge.jtds.jdbc.JtdsConnection.<init>(JtdsConnection.java:428)

  at net.sourceforge.jtds.jdbc.Driver.connect(Driver.java:180)

  at java.sql.DriverManager.getConnection(DriverManager.java:571)

  at java.sql.DriverManager.getConnection(DriverManager.java:187)

  at com.mcafee.orion.core.db.sqlserver.JtdsJdbcDriver.getConnection(JtdsJdbcDriver.java:91)

  at com.mcafee.orion.core.db.base.DriverRegistry.getConnection(DriverRegistry.java:202)

  at com.mcafee.orion.core.db.base.DriverRegistryConnectionFactory.createConnection(DriverRegistryConnectionFactory.java:34)

  at org.apache.commons.dbcp.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:582)

  at com.mcafee.orion.core.db.base.DbConnectionPool$LoggingConnectionFactory.makeObject(DbConnectionPool.java:215)

  at org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:1188)

  at com.mcafee.orion.core.db.base.DbConnectionPool$CountingGenericObjectPool.borrowObject(DbConnectionPool.java:168)

  at org.apache.commons.dbcp.PoolingDataSource.getConnection(PoolingDataSource.java:106)

  at com.mcafee.orion.core.db.base.DbConnectionPool.getConnection(DbConnectionPool.java:64)

  at com.mcafee.orion.core.db.base.Database.getConnection(Database.java:498)

  at com.mcafee.orion.core.db.base.MfsDatabase.getUnderlyingConnection(MfsDatabase.java:202)

  at com.mcafee.orion.core.db.base.MfsDatabase.getContextualConnection(MfsDatabase.java:186)

  at com.mcafee.orion.core.db.base.MfsDatabase.getDelegatedConnection(MfsDatabase.java:181)

  at com.mcafee.orion.core.db.base.MfsDatabase.getConnection(MfsDatabase.java:163)

  at com.mcafee.orion.core.db.base.MfsDatabase.getConnection(MfsDatabase.java:151)

  at com.mcafee.orion.core.db.base.Database.validate(Database.java:722)

  at com.mcafee.orion.core.db.base.Database.init(Database.java:774)

  at com.mcafee.orion.core.db.base.Database.<init>(Database.java:383)

  at com.mcafee.orion.core.db.base.Database.<init>(Database.java:393)

  at com.mcafee.orion.core.db.base.MfsDatabase.<init>(MfsDatabase.java:108)

  at com.mcafee.orion.core.OrionCore.getMultiTenantModeFromDb(OrionCore.java:609)

  at com.mcafee.orion.core.OrionCore.initMultiTenantMode(OrionCore.java:603)

  at com.mcafee.orion.core.OrionCore.initMultiTenantModeOrFailStartup(OrionCore.java:585)

  at com.mcafee.orion.core.OrionCore.init(OrionCore.java:863)

  at com.mcafee.orion.core.OrionCore.start(OrionCore.java:517)

  at com.mcafee.orion.core.server.OrionLifecycleListener.lifecycleEvent(OrionLifecycleListener.java:137)

  at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)

  at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:90)

  at org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:402)

  at org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:347)

  at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:725)

  at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)

  at org.apache.catalina.startup.Catalina.start(Catalina.java:691)

  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)

  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

  at java.lang.reflect.Method.invoke(Method.java:606)

  at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:322)

  at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:456)

Caused by: java.net.ConnectException: Connection timed out: connect

  at java.net.DualStackPlainSocketImpl.connect0(Native Method)

  at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)

  at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)

  at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)

  at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)

  at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172)

  at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)

  at java.net.Socket.connect(Socket.java:579)

  at net.sourceforge.jtds.jdbc.SharedSocket.createSocketForJDBC3(SharedSocket.java:288)

  at net.sourceforge.jtds.jdbc.SharedSocket.<init>(SharedSocket.java:251)

  at net.sourceforge.jtds.jdbc.JtdsConnection.<init>(JtdsConnection.java:323)

  ... 42 more

2014-09-15 09:34:46,883 FATAL [main] core.OrionCore   - killing server. reason = Failed to read the server's multi-tenant mode property (is there a multi.tenant.mode record in the OrionServerProperties table?)

ansarias
Level 13
Report Inappropriate Content
Message 6 of 20

Re: Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

Looks like ePO cannot talk to SQL: check that the server is available, online, that no-one has changed the details of the account being used to log in, and so on.

Fademidun
Level 10
Report Inappropriate Content
Message 7 of 20

Re: Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

db.port=49477 from db.properties, same as tcp/ip port from sql config manager

No one has changed anything. I can also logon to DB ok via mgt tools studio, now I can see application server service stopped randomly???

Fademidun
Level 10
Report Inappropriate Content
Message 8 of 20

Re: Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

I'm installing another server to install 5.1.1 fresh install, will find a way to move all policy and task later... might need your assistance on that later

yuems
Level 11
Report Inappropriate Content
Message 9 of 20

Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

Hi,

When you run

netstat -an | findstr "DBServerIP"

command on EPO server, you see all connections status "established"?

Re: Re: McAfee ePolicy Orchestrator 5.1.0 Event Parser service Stopped

Jump to solution

@yuems

This did not return any reply.. (netstat -an | findstr "DBServerIP") took me back to the prompt..

Thanks