0 Replies Latest reply on Feb 17, 2017 4:45 AM by simonp

    Searching for md5 not working but file does, This was working but not anymore

    simonp

      So on some of my endpoints im getting some errors not sure if anyone has seen this before:

      So if i search for a MD5 I get a result but I know this file sits on one of our workstations, If I search for the file name I find it on the workstation.

       

      These are the logs from the workstation

       

      Feb 17 2017:09:27:20.807:   SYSTEM: ts_dll.cpp  :  503: Initializing module 'Rule Parser' --> [Passed]

      U.2296.2664: Feb 17 2017:09:27:20.854:   SYSTEM: ts_dll.cpp  :  503: Initializing module 'Rule Analyzer' --> [Passed]

      U.2296.2664: Feb 17 2017:09:27:20.854:   SYSTEM: ts_dll.cpp  :  503: Initializing module 'SysInfo' --> [Passed]

      U.2296.2664: Feb 17 2017:09:27:20.854:   SYSTEM: ts_dll.cpp  :  503: Initializing module 'Rule Interface' --> [Passed]

      U.2296.2664: Feb 17 2017:09:27:20.854:   SYSTEM: ts_dll.cpp  :  555: Trace State : Enabled.

      U.2296.2664: Feb 17 2017:09:27:20.870:   SYSTEM: ts_dll.cpp  :  738: Trace Initialization : Done.

      U.2296.4420: Feb 17 2017:09:39:15.682:   SYSTEM: tsranalyzer.cpp:  925: Statebit [49] Pid [5048]

      U.2296.4420: Feb 17 2017:09:40:51.490:   SYSTEM: tsranalyzer.cpp:  925: Statebit [c] Pid [5712]

      U.2296.4380: Feb 17 2017:09:40:53.496:   SYSTEM: hc.cpp      :  159: Received IPC Channel connect notification (CONNECTED) for 5712

      U.2296.4360: Feb 17 2017:09:40:53.570:   SYSTEM: hc.cpp      :   96: Received Injected Notification for process 5712

      U.2296.3344: Feb 17 2017:09:42:56.067:   SYSTEM: tsranalyzer_dt.cpp:  231: Stopping Deep trace for pid[5712] stop

      U.2296.4380: Feb 17 2017:09:51:08.315:   SYSTEM: hc.cpp      :  159: Received IPC Channel connect notification (DISCONNECTED) for 5712

      U.2296.4356: Feb 17 2017:09:51:08.549:   SYSTEM: hc.cpp      :  117: Received termination Notification of process 5712