cancel
Showing results for 
Search instead for 
Did you mean: 
Reliable Contributor jmcg
Reliable Contributor
Report Inappropriate Content
Message 1 of 6

Orion.log spamming "Product ID not found for analyzer"

Jump to solution

Hello,

 

My Orion.log is spamming :

 

2019-12-13 10:29:13,120 WARN  [core-CommandInvoker-thread-174] threats.ResolvedThreatsAction  - Product ID not found for analyzer: ABE1073E-C616-4D

2019-12-13 10:29:13,151 WARN  [core-CommandInvoker-thread-177] threats.ResolvedThreatsAction  - Product ID not found for analyzer: ABE1073E-C616-4D

2019-12-13 10:29:13,167 WARN  [core-CommandInvoker-thread-185] threats.ResolvedThreatsAction  - Product ID not found for analyzer: ABE1073E-C616-4D

2019-12-13 10:29:13,167 WARN  [core-CommandInvoker-thread-179] threats.ResolvedThreatsAction  - Product ID not found for analyzer: ABE1073E-C616-4D

 

I guess this come from a rule in exploit prevention or ATP but not sure.

1 Solution

Accepted Solutions
Reliable Contributor jmcg
Reliable Contributor
Report Inappropriate Content
Message 4 of 6

Re: Orion.log spamming "Product ID not found for analyzer"

Jump to solution

Ok, found it.

 

Linked to the automatic response named: "Protection Workspace - Master Threat Summary Rule"

 

So I have disable it for the moment.

View solution in original post

5 Replies
McAfee Employee LKS
McAfee Employee
Report Inappropriate Content
Message 2 of 6

Re: Orion.log spamming "Product ID not found for analyzer"

Jump to solution

Hi jmcg,

To be honest not sure what is is. May be it is pointing to some extension corruption or file corruption. 

The below error is alarming to ENSTP product. Do you see any other error in Orion. 

Product ID not found for analyzer

 

* Check if all ENS policies are accessible.

* Did you recently make any changes in EPO.

* When did you notice this issue.

 

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

Reliable Contributor jmcg
Reliable Contributor
Report Inappropriate Content
Message 3 of 6

Re: Orion.log spamming "Product ID not found for analyzer"

Jump to solution

I don't know if that help but I have some others details before

 

2019-12-13 11:13:09,509 WARN  [core-CommandInvoker-thread-182] services.ComponentService  - Waiting for task entry id 17782642 to be at the top of the queue.
2019-12-13 11:13:10,524 WARN  [core-CommandInvoker-thread-182] services.ComponentService  - Waiting for task entry id 17782642 to be at the top of the queue.
2019-12-13 11:13:11,118 WARN  [core-CommandInvoker-thread-185] autoupdate.AutoUpdateCommand  - a command of type com.mcafee.EPOAGENTMETA.autoupdate.AutoUpdateCommand should have its displayNameKey property set
2019-12-13 11:13:11,540 WARN  [core-CommandInvoker-thread-182] services.ComponentService  - Waiting for task entry id 17782642 to be at the top of the queue.
2019-12-13 11:13:35,368 WARN  [core-CommandInvoker-thread-185] autoupdate.AutoUpdateCommand  - a command of type com.mcafee.EPOAGENTMETA.autoupdate.AutoUpdateCommand should have its displayNameKey property set
2019-12-13 11:15:39,449 WARN  [http-nio-8081-exec-88] internal.LdapServerServiceImpl  - No preferred registered server for domain= eu.com
2019-12-13 11:17:11,512 WARN  [scheduler-InternalTask-thread-10] service.TelemetryDataService  - SQL Exception occured while fetching the details of the CU installed 
2019-12-13 11:24:32,294 WARN  [core-CommandInvoker-thread-182] threats.ResolvedThreatsAction  - Product ID not found for analyzer: ABE1073E-C616-4D
2019-12-13 11:24:32,560 WARN  [core-CommandInvoker-thread-182] threats.ResolvedThreatsAction  - Product ID not found for analyzer: ABE1073E-C616-4D
Reliable Contributor jmcg
Reliable Contributor
Report Inappropriate Content
Message 4 of 6

Re: Orion.log spamming "Product ID not found for analyzer"

Jump to solution

Ok, found it.

 

Linked to the automatic response named: "Protection Workspace - Master Threat Summary Rule"

 

So I have disable it for the moment.

View solution in original post

McAfee Employee LKS
McAfee Employee
Report Inappropriate Content
Message 5 of 6

Re: Orion.log spamming "Product ID not found for analyzer"

Jump to solution

Is it fixed now. If not we would require complete Orion log with debug enable to see what's going on. The given logs also does not give much information as it is a generic message. You can log a SR incase if you required more assistance. 

Reliable Contributor jmcg
Reliable Contributor
Report Inappropriate Content
Message 6 of 6

Re: Orion.log spamming "Product ID not found for analyzer"

Jump to solution
We are not using Protection Workspace, so we have keep it disabled it for now.
More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community