Control Compliance Suite

  • Private Community
 View Only
Back to discussions
Expand all | Collapse all

Same CCS Standard, same data collection, different results

  • 1.  Same CCS Standard, same data collection, different results

    Posted Jan 18, 2013 12:24 PM

    Does anyone experience different results runnning the same CCS standard based from same data collection and having completely diffrent results?

    Looks like some time evaluation process cannot get the data from data colection.....



  • 2.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 18, 2013 01:31 PM

    Yes, I have experienced a similar behavior of CCS before.

     

    To determine what is causing this, try running a data collection job.

    - Shortlist one or 2 checks which are giving you different results and run data collection jobs only for these checks

     

    - Second – Are all the servers giving different results all the time or is this specific only to some servers? Is this DB related?

     

    - Third - Do the target servers have multipe IPs?

    Run nslookup on these servers multiple times. It should resolve to the same IP everytime.



  • 3.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 18, 2013 02:34 PM

    Chaitali,

    THanks for replying. I have a couple servers with this behavior. The data collection is retrieving the correct information but the 2 evaluations using the same standard are different. Run number 1 result is unknown abd 15 minutes later another evaluation run  result is pass. Servers are not being used by anybody just for this test. The evaluation process fails in some runs.  Servers have only 1 IP.

     

     

     

     



  • 4.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 18, 2013 04:47 PM

    How does the name resolution for this server look? Does nslookup give you valid results?



  • 5.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 18, 2013 05:12 PM

    Yes, same results. The issue is not the data collection but the evaluation. It missed data from the data collection.



  • 6.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 18, 2013 06:42 PM

    I've seen this in CCS 11 when you run data collection from a CCS mgr on Win2k3.

    In both cases, it was fixed by moving the manager to Win2k8.

    Telltale signs are "RMSFactory" or similar errors in the job.



  • 7.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 22, 2013 12:32 PM

    Also, since only the eval results are inconsistent, the issue may be related to CCS SQL database.

    The messages in the "Failures" tab of the Job Status in CCS will be good indicators of what might have caused this.

     

     



  • 8.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 23, 2013 04:58 PM
    Just one error message that occurs in both cases regarding field not found that according to Sysmantec Enginner is not the issue. Sometime the eval brings the expected results sometimes not. No messages. Our DB are in the same server as the manager and we are in the beginning of the deployment. By the way, we use Windows 2008 R2....


  • 9.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 25, 2013 03:22 PM
    aervillar: fresh ccs 11 install or upgrade from ccs 10.x?


  • 10.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 25, 2013 03:38 PM

    fresh CCS 11. According to Symantec Engineers looks like the issue is related to DB performance. We are upgrading the DB and will update next week if it worked..



  • 11.  RE: Same CCS Standard, same data collection, different results

    Posted Jan 31, 2013 05:59 PM

    Greetings all,

     

    I have seen this type of behavior when there are multiple MQEs.  Since the queries are divied up in a round-robin fashion, there must be a difference between/among the MQEs that is affecting the results. One example is that one of the servers has IIS running, where the other does not.  The one that does not have it running is the one that is returning incomplete information.

     

    I hope this helps...

     

    Cheers!



  • 12.  RE: Same CCS Standard, same data collection, different results

    Posted Feb 22, 2013 12:18 PM

    Looks like the issue was fixed upgrading all CCS machines to latest version.