cancel
Showing results for 
Search instead for 
Did you mean: 
avilt
Level 8
Report Inappropriate Content
Message 1 of 7

ePO 5.10 Unexpected Error Event Parser service refuses to start

I have installed ePO 5.10 with ENS, worked fine for 2 days.

Now when accessing the dashboards page in ePO, the following message displays:

An unexpected error occurred.

Also ePO 5.10 Event Parser service refuses to start under services.
I have explored the workaround from the following link, but No Count
option is not selected.

https://kc.mcafee.com/corporate/index?page=content&id=KB91124&actp=null&viewlocale=en_US&locale=en_U...


Under core:config, the test connection is successful.

What else can be the problem, no change performed on the server.

6 Replies
McAfee Employee Thussain
McAfee Employee
Report Inappropriate Content
Message 2 of 7

Re: ePO 5.10 Unexpected Error Event Parser service refuses to start

Thank you for posting your query

Could you let me know what error message do you see in Eventparser.log file

The log is located at c:\programfiles(x86)\McAfee\Epo\DB\Logs\Eventsparser

Could you confirm what account are you using to start the event parser service, did you change the password for the account. 

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 3 of 7

Re: ePO 5.10 Unexpected Error Event Parser service refuses to start

Did anything change at all on the sql server, such as Windows updates, a reboot, etc?  When core/config successfully tests but eventparser still won't start, then the first thing to check is whether the sql server is using dynamic or static ports.  Sometimes on a reboot, the dynamic port can change.  You can test that by going to sql configuration manager, sql server network configuration, protocols for your sql instance name, then double-click on tcp/ip.  Click on the ip addresses tab, then scroll to the bottom.  IPALL section will show you the actual port it is using and whether it is dynamic or not.  If the port has changed, then update that in your core/config.  If the instance name is mssqlserver (the default), in core/config, make sure your instance name is blank.

If none of that helps, then find out what changed.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted
avilt
Level 8
Report Inappropriate Content
Message 4 of 7

Re: ePO 5.10 Unexpected Error Event Parser service refuses to start

TCP/IP port is dynamic, when I restart a new dynamic port is assigned, The SQL instance name is SQLEXPRESS.

Please find attached the required logs.

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 5 of 7

Re: ePO 5.10 Unexpected Error Event Parser service refuses to start

I would set sql to use static ports instead of dynamic so you don't run into this and restart sql services.  Once you do that, restart epo services, then go to core\config and reset the port there.  So your core\config page should reflect sqlexpress as your instance and the correct port that is in sql config mgr.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

avilt
Level 8
Report Inappropriate Content
Message 6 of 7

Re: ePO 5.10 Unexpected Error Event Parser service refuses to start

It resolved my issue but is it a mandatory requirement, is it documented?

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 7 of 7

Re: ePO 5.10 Unexpected Error Event Parser service refuses to start

No, it is not in a KB - I can write one for it when I get a chance.  But, the sql port is a requirement to be the correct port in core/config.  It is the nature of sql when using dynamic ports, that it can change.  This can cause connection problems with any application connecting to that sql server, regardless of whether it is epo or any other 3rd party application.  Setting it to static prevents the random disconnects when that port changes dynamically.  

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community