Long-running sleeping queries are left open to the SQL Server when the DCC extension is installed
Last Modified: 2023-06-15 05:38:31 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
Long-running sleeping queries are left open to the SQL Server when the DCC extension is installed
Technical Articles ID:
KB92236
Last Modified: 2023-06-15 05:38:31 Etc/GMT Environment
Cloud Workload Security (CWS) 5.3.2 and earlier ePolicy Orchestrator (ePO) 5.10.x, 5.9.x Data Center Controller (DCC) NOTE: DCC is the base management extension for CWS. When you check in the extension of a connector, it also automatically checks in the DCC extension. One CWS extension is shared among all connectors. Problem
An ePO server with the DCC extension installed executes queries against the SQL database. In certain circumstances, some of these queries aren't closed and remain in a sleeping state. This action in turn holds a connection open, which can cause The query remaining open is shown below: New instances of these queries are executed on a scheduled basis. As a result, you might see multiple instances of these sleeping queries.
Cause
A connection leak in the DCC extension causes this issue.
Solution
The issue is resolved with CWS 5.3.3.24. This release includes an updated DCC to build 5.3.3.28. Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.
Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.
NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products. Workaround
If you're not using DCC, remove the extension from ePO. This action prevents the long-running connections.
Affected ProductsLanguages:This article is available in the following languages: |
|