>>...
Original Message:
Sent: 04-30-2021 12:55 PM
From: John Owens
Subject: Unexpected server error after upgrade to 14.3.1148.0100
There is an issue being fixed in 14.3 RU2. Eta May/June.
Does turning off Audit Log fix your issues?
------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
Original Message:
Sent: 04-30-2021 12:45 PM
From: Ricardo Martins
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Hey guys
I'm having the same problem.
Does anyone know if with the new version 14.3.3580.1000 this is fixed?
Original Message:
Sent: 04-30-2021 11:44 AM
From: Tony Scislwa
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Having the same issue in 14.3 RU1 build 3384.
Original Message:
Sent: 03-22-2021 01:22 PM
From: Ricardo Martins
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Hey guys I have the same problem in SEPM version 14.3.3385.1000 Did you manage to solve this?
Original Message:
Sent: 12-10-2020 02:26 PM
From: John Owens
Subject: Unexpected server error after upgrade to 14.3.1148.0100
I would open a case for this. 14.3 RU1 SEPM should have resolved the issue.
------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
Original Message:
Sent: 12-10-2020 02:25 PM
From: Aleksandar Devecerski
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Yes
Original Message:
Sent: 12-10-2020 02:24 PM
From: John Owens
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Ok. So if you turn off Audit in external logging settings do the errors stop?
------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
Original Message:
Sent: 12-10-2020 02:22 PM
From: Aleksandar Devecerski
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Original Message:
Sent: 12-10-2020 02:16 PM
From: John Owens
Subject: Unexpected server error after upgrade to 14.3.1148.0100
No. That error happens only while external logging is ON and repeats every 30 seconds
Yes. SEPM version is 14.3 RU1
Ok. I see it:
To confirm you are running SEPM 14.3 RU1 and have Audit log disabled and this error continues?
12/10/2020 19:47 Error An unexpected exception has occurred Unexpected server error. Unexpected server error. Unexpected server error. "java.lang.StringIndexOutOfBoundsException: begin 0, end -66, length 124222 at java.base/java.lang.String.checkBoundsBeginEnd(String.java:3319) at java.base/java.lang.String.substring(String.java:1874) at com.sygate.scm.server.task.ExternalLoggingWorker.splitLongMessage(ExternalLoggingWorker.java:3312) at com.sygate.scm.server.task.ExternalLoggingWorker.getPolicyEventLogData(ExternalLoggingWorker.java:2379) at com.sygate.scm.server.task.ExternalLoggingWorker.handleLog(ExternalLoggingWorker.java:600) at com.sygate.scm.server.task.ExternalLoggingWorker.run(ExternalLoggingWorker.java:429) at java.base/java.util.TimerThread.mainLoop(Timer.java:556) at java.base/java.util.TimerThread.run(Timer.java:506) com.sygate.scm.server.util.ServerException: Unexpected server error. at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:506) at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:470) at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:466) at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:462) at com.sygate.scm.server.task.ExternalLoggingWorker.run(ExternalLoggingWorker.java:463) at java.base/java.util.TimerThread.mainLoop(Timer.java:556) at java.base/java.util.TimerThread.run(Timer.java:506) Caused by: java.lang.StringIndexOutOfBoundsException: begin 0, end -66, length 124222 at java.base/java.lang.String.checkBoundsBeginEnd(String.java:3319) at java.base/java.lang.String.substring(String.java:1874) at com.sygate.scm.server.task.ExternalLoggingWorker.splitLongMessage(ExternalLoggingWorker.java:3312) at com.sygate.scm.server.task.ExternalLoggingWorker.getPolicyEventLogData(ExternalLoggingWorker.java:2379) at com.sygate.scm.server.task.ExternalLoggingWorker.handleLog(ExternalLoggingWorker.java:600) at com.sygate.scm.server.task.ExternalLoggingWorker.run(ExternalLoggingWorker.java:429) ... 2 more " s-006 WBM
------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
Original Message:
Sent: 12-10-2020 02:12 PM
From: Aleksandar Devecerski
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Hello John
Error messages start when I turn external logging ON. And stop when logging is OFF.
The same as with 14.3 MP1.
External logging was on some 5 minutes this morning 8:25 - 8:30 (not sure exactly) and 5 minutes just now, from 19:43 - 19:48.
Attached you can find todays mentioned event log ('error and above' severity).
There are other errors, 90 in total.
While external logging is ON (2 periods of approx 5 minutes each) errors are these
and 30 seconds apart (sorry, but exported report does not contain Stack Trace field).
While external logging is OFF errors are 15 minutes apart
Original Message:
Sent: 12-10-2020 10:26 AM
From: John Owens
Subject: Unexpected server error after upgrade to 14.3.1148.0100
That may be a different issue. Does turning of Audit Logging fix it? You can see the full error if you go to Monitor > Logs > System > Server Activity logs. Please post the full error when you get it.
------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
Original Message:
Sent: 12-10-2020 02:39 AM
From: Aleksandar Devecerski
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Nope. Still happening here.
Original Message:
Sent: 12-09-2020 02:19 PM
From: John Owens
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Should be resolved in 14.3 RU1.
After upgrading to Endpoint Protection Manager 14.3 MP1 and enabling Audit Log in External Logging Unexpected Server Errors occur every 30 seconds (broadcom.com)
------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
Original Message:
Sent: 12-09-2020 09:46 AM
From: Jake Burnett
Subject: Unexpected server error after upgrade to 14.3.1148.0100
We are having the same issue. AFter upgrading to 14.3.1148.0100
Original Message:
Sent: 11-25-2020 10:39 AM
From: Jake Burnett
Subject: Unexpected server error after upgrade to 14.3.1148.0100
We are having this same issue. Adrian, did you say your SIEM still got the logs even after turning off "Enable Transmission of Logs to a Syslog Server"?
Original Message:
Sent: 09-11-2020 03:58 PM
From: Unknown User
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Hi. Same problem here. I disabled the "Audit Log" and the problem resolved, our SIEM resumed the log reception.
Original Message:
Sent: 08-07-2020 10:11 AM
From: John Owens
Subject: Unexpected server error after upgrade to 14.3.1148.0100
I would get a case opened for investigation.
Original Message:
Sent: 8/7/2020 2:10:00 AM
From: a.devecerski
Subject: RE: Unexpected server error after upgrade to 14.3.1148.0100
Didn't make any changes to SEPM after update. This way, if anything happens, I know that new version is the culprit.
Original Message:
Sent: 08-06-2020 06:15 PM
From: John Owens
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Did you happen to enable the new Audit feature in External Logging after upgrading SEPM to 14.3 MP1?
Original Message:
Sent: 8/6/2020 6:02:00 PM
From: a.devecerski
Subject: Unexpected server error after upgrade to 14.3.1148.0100
Hello all
Just noticed constant "Unexpected server error" messages in SEPM, Admin, Servers frame.
Upgraded SEPM to v14.3 MP1 few days ago, with couple of selected clients (one on server, the rest on selected of Win10/Win7, 32/64 bit machines). No problems at all, everything went smoothly, as always. After day or two of standard use for these, without any issues, deployed MP1 install packages to the rest of the client groups.
Everything seems to be working fine, I don't see anything else besides this error message.
Symantec Diagnostic Tool screen reports one failed communication test. 3 warnings I think are not relevant (one for IE, the other one for not having free 100 Gbs on system partition - there is 50 and final one for DHCP enabled on NIC - system has 2 network interfaces, one in use with static IP address, the other disabled, set to DHCP auto). Everything else is green.
"Click here for solution" gets me to the online SEP Installation and Administration Guide, couldn't find anything there.
What is this error in Diagnostic Tool and could it be responsible for "Unexpected server error"?
scm-server-0.log, attached, contains some "SEVERE" and "WARNING" items, but I'm not really sure what to do about them.
SEPM seems to be downloading definitions correctly
Anyone else seeing this or it's just my system?
Any suggestions?
Regards