Endpoint Protection

 View Only

 Tons of "Unexpected Server Error" Messages in SEPM

Jump to  Best Answer
tsdynintl's profile image
tsdynintl posted Mar 03, 2021 08:20 AM

Getting tons of errors saying "Unexpected Server Error". Looking at the logs it's showing a bunch of Java messages. I'm not sure what it means. Anybody got any ideas? Thanks.

Event type: An unexpected exception has occurred
Event description: Unexpected server error.
Error message: Unexpected server error.
Error code: Unexpected server error.
Stack trace: java.lang.StringIndexOutOfBoundsException: begin 86086, end 86020, length 207414 at java.base/java.lang.String.checkBoundsBeginEnd(String.java:3319) at java.base/java.lang.String.substring(String.java:1874) at com.sygate.scm.server.task.ExternalLoggingWorker.splitLongMessage(ExternalLoggingWorker.java:3312) at com.sygate.scm.server.task.ExternalLoggingWorker.getPolicyEventLogData(ExternalLoggingWorker.java:2379) at com.sygate.scm.server.task.ExternalLoggingWorker.handleLog(ExternalLoggingWorker.java:600) at com.sygate.scm.server.task.ExternalLoggingWorker.run(ExternalLoggingWorker.java:429) at java.base/java.util.TimerThread.mainLoop(Timer.java:556) at java.base/java.util.TimerThread.run(Timer.java:506) com.sygate.scm.server.util.ServerException: Unexpected server error. at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:506) at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:470) at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:466) at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:462) at com.sygate.scm.server.task.ExternalLoggingWorker.run(ExternalLoggingWorker.java:463) at java.base/java.util.TimerThread.mainLoop(Timer.java:556) at java.base/java.util.TimerThread.run(Timer.java:506) Caused by: java.lang.StringIndexOutOfBoundsException: begin 86086, end 86020, length 207414 at java.base/java.lang.String.checkBoundsBeginEnd(String.java:3319) at java.base/java.lang.String.substring(String.java:1874) at com.sygate.scm.server.task.ExternalLoggingWorker.splitLongMessage(ExternalLoggingWorker.java:3312) at com.sygate.scm.server.task.ExternalLoggingWorker.getPolicyEventLogData(ExternalLoggingWorker.java:2379) at com.sygate.scm.server.task.ExternalLoggingWorker.handleLog(ExternalLoggingWorker.java:600) at com.sygate.scm.server.task.ExternalLoggingWorker.run(ExternalLoggingWorker.java:429) ... 2 more
Site: XXXXXXXXX
Server: XXXXXXXX
Date: 03/03/2021 07:40:56
Severity: Error

John Owens's profile image
Broadcom Employee John Owens  Best Answer
This looks like an issue with Syslog/External Logging setup on the SEPM.  If you uncheck "Audit" in your External Logging configuration in the SEPM do these errors stop?
tsdynintl's profile image
tsdynintl
Ah, that has to be it. We're in the midst of a massive re-IP of our entire network. Wheee. I bet it's not seeing the new SEIM IP. I'll look. Thanks.