Endpoint Protection

 View Only
  • 1.  LiveUpdate Errrors on SEPM

    Posted Apr 28, 2023 03:04 AM

    Hi,
    since yesterday we get a lot of errors on Liveupdate:

    Notification Events

    Earliest Event Time: 28/04/2023 03:27:04 to Latest Event Time: 28/04/2023 03:37:04

     

     

    Server System Events

    Time

    Site

    Server

    Severity

    Event Type

    Description

    28/04/2023 03:34:22

    Site sepm

    sepm

    Error

    LiveUpdate failed

    LiveUpdate failed.



    For more information on enforcer events, see the Monitors page, Logs tab, and select the System log type and the Enforcer Activity log content.
    For more information on replication failure events, see the Monitors page, Logs tab, and select the System log type and the Server Activity log content. You can also look the Reports page, Quick Reports tab. Select the System report type and run the "Database Replication Failures Over Time" report.
    For more information on server activity events, see the Monitors page, Logs tab, and select the System log type and the Server Activity log content.
    For more information on system error events, see the Reports page, Quick Reports tab. Select the System report type and run the "Top Servers That Generate Errors" report.
    For more information on backup events, see the Monitors page, Logs tab, and select the System log type and the Server Activity log content. You can also view or change settings by selecting the database on the Admin page, Servers page, and then clicking Edit Database Properties Backup Settings.


    We did not make any changes on our system. Is there an issue on Server Side? Are there detailed Logs available to find out more details? 



  • 2.  RE: LiveUpdate Errrors on SEPM

    Posted Apr 28, 2023 03:58 AM

    Hi,

    I know it is not help, but have a same issue with same timing.




  • 3.  RE: LiveUpdate Errrors on SEPM

    Broadcom Employee
    Posted Apr 30, 2023 11:33 PM

    Troubleshoot LiveUpdate and definition issues with Endpoint Protection Manager




  • 4.  RE: LiveUpdate Errrors on SEPM

    Posted May 05, 2023 02:15 PM

    unhelpful. this article mentions log files which do not exist on our sepm 14.3 ru7. 

    Log.LiveUpdate 

    Default Location:

    • C:\ProgramData\Symantec\LiveUpdate\Log.LiveUpdate


    This log file is not present on our installation. So please check and update your documentation and troubleshooting links. All other logs regarding this error are useless.  the error is gone not and did not come back again. so as others here already mentioned this is your liveupdate enviroment at broadcom and not a customer issue.




  • 5.  RE: LiveUpdate Errrors on SEPM

    Broadcom Employee
    Posted May 05, 2023 02:24 PM

    Hi UCLAT,

    Lux.log will be the log you want to review for SEPM 14.3 RU1+

    FINEST logging will need to be enabled for this log to be created.

    Please open a support case if this happens again and we can assist better.



    ------------------------------
    John Owens
    Strategic Support Engineer | Symantec Endpoint Security Division (SES)
    Broadcom Software
    ------------------------------



  • 6.  RE: LiveUpdate Errrors on SEPM

    Posted May 01, 2023 05:48 PM

    ...and same here. At least now we know it's on Broadcom's end.




  • 7.  RE: LiveUpdate Errrors on SEPM

    Posted May 27, 2023 12:50 PM

    are you still getting these errors? We are getting them and have not made anything changes on our network.




  • 8.  RE: LiveUpdate Errrors on SEPM

    Broadcom Employee
    Posted May 28, 2023 12:40 PM

    You may be experiencing this known issue: "LiveUpdate failed" notifications received after upgrading to 14.3 RU7

    SEPM 14.3 RU7 enabled the System Event notification condition named "Server Error" by default and this condition includes LiveUpdate errors. Some customer environments experience errors in LiveUpdate that are resolved the next time LiveUpdate runs, and these errors were not plainly visible pre-RU7 unless that conditioned had been enabled or you examined the logs. The logs also often tell you that LiveUpdate is succeeding despite these errors, which may simply be to intermittent networking issues beyond the SEPM's control. Check the following log for "launch service return code":

    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\LiveUpdateTask-0.log 

    For example, a LiveUpdate error followed by a successful session 10 minutes later:
    2023-05-25 22:14:13.834 THREAD 112 WARNING: SemLaunchService> parseServiceReturnText>> launch service return code: 4
    2023-05-25 22:24:20.742 THREAD 301 WARNING: SemLaunchService> parseServiceReturnText>> launch service return code: 0


    The extended details LiveUpdate sessions may be found in:

    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\logs\lux.log




  • 9.  RE: LiveUpdate Errrors on SEPM

    Posted May 30, 2023 06:06 PM

    I am also getting this on two different SEPM servers at two different locations.  Started happening in the last couple of days.