When running the ePolicy Orchestrator 5.10 software upgrade installer the following message prevents the installation from progressing:
The ePolicy Orchestrator server has more than 10,000 unprocessed events
Although we have setup a server task to purge logs, we discovered that the following folder:C:\Program Files (x86)\McAfee\ePolicy Orchestrator\db\Events\debug contains 107478 items.
Should we remove these files? Is there a way in the ePO console where they can be trimmed?
It is kind of a known issue back from 4.x where as a workaround you need to:
1. Stop the Event Parser service 2. Go to the folder: %ProgramFiles(x86)%\McAfee\ePolicy Orchestrator\DB\Events\ 3. Delete all the files inside and all the file inside the folders: Debug, Unknown. 4. Start the Event Parser service.
You can back up that folder in case you think it contains something important because it is not part of the disaster recovery data: