Failed to initialize log level based on config.xml in /etc/cma.d (Client tasks fails on Linux)
Last Modified: 2022-02-10 17:37:27 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
Failed to initialize log level based on config.xml in /etc/cma.d (Client tasks fails on Linux)
Technical Articles ID:
KB95289
Last Modified: 2022-02-10 17:37:27 Etc/GMT Environment
McAfee Agent 5.x.x Linux - supported platforms For environment information, see KB51573 - Supported platforms for McAfee Agent 5.x. Problem
All client tasks fail. You see this problem with either a deployment or update task. NOTE: This issue isn’t related to a problem with the agent-server communication interval (ASCI). The MASVC.log and McScript logs record the errors below ( ahclient.Info: Initiating spipe connection to site https://10.x.x.x:443/spipe/pkg?AgentGuid={cbd5469a-9389-11eb-1019-000d3aa04c07}&Source=Agent_3.0.0. curl.Info: Before Encoding URL:https://10.x.x.x:443/spipe/pkg?AgentGuid={cbd5469a-9389-11eb-1019-000d3aa04c07}&Source=Agent_3.0.0, After Encoding URL:https://10.x.x.x:443/spipe/pkg?AgentGuid=%7Bcbd5469a-9389-11eb-1019-000d3aa04c07%7D&Source=Agent_3.0.0 ahclient.Info: connection initiated to site https://10.x.x.x:443/spipe/pkg?AgentGuid={cbd5469a-9389-11eb-1019-000d3aa04c07}&Source=Agent_3.0.0. ahclient.Info: Network library rc = <1008>, Agent handler reports response code <200>. ahclient.Info: Agent handler reports spipe package received. response code 200. ahclient.Info: Spipe connection response received, network return code = 1008, response code 200. policy.Info: Agent received POLICY package from ePO server policy.Info: Loaded data looks fine, proceed further to update the database ahclient.Info: Agent communication session closed NOTE: Even though the ASCI is working, after you run the command
cmdagent.Error: Failed to get ma info, error code <507>. cmdagent.Error: Get agent mode failed. Operation failed event.Error: Low disk space in agent data path. Minimum free disk space required = 500 MB, free disk space available = 16 MB. event.Error: Custom event can't be saved, err = <28>. msgbus.Info: File watcher callback invoked on broker config change, file name </var/McAfee/agent/.msgbus/config.ini> msgbus.Info: File watcher callback invoked on broker config change, file name </var/McAfee/agent/.msgbus/config.ini> msgbus.Info: File watcher callback invoked on broker config change, file name </var/McAfee/agent/.msgbus/config.ini> scheduler.Info: The task ma.policy.enforce.timeout.task.name is successful scheduler.Info: Next time(local) of task ma.policy.enforce.timeout.task.name: 2022-01-20 14:02:56 msgbus.Info: Received Timer event to read msgbus config file msgbus.Warning: Broker information is not available, rc <1> msgbus.Info: msgbus connectvity status : Disconnected msgbus.Info: Removed file watcher on broker config file </var/McAfee/agent/.msgbus/config.ini> msgbus.Info: Added file watcher on broker config file </var/McAfee/agent/.msgbus/config.ini> You see the errors below in the NOTE: At each update attempt where you see the error, it stops initializing. This issue occurs because the symbolic link isn’t in sync. 2022-01-31 07:04:01 [96801] (16384) [LogLvl] [I] Initializing log level based on config.xml in /etc/cma.d 2022-01-31 07:04:01 [96801] (16384) [LogLvl] [I] Failed to initialize log level based on config.xml in /etc/cma.d. Using default configuration. 2022-01-31 07:04:01 [96801] (16384) [MueEep] [I] Initializing MUE EEP Script ID = 1640062907 2022-01-31 08:00:01 [98306] (16384) [ScrptMain] [I] START [/opt/McAfee/agent/bin/Mue_InUse -script /var/McAfee/agent/update/UpdateMain.McS -id 894815115 -localeid 0409 -logfile /var/McAfee/agent/logs/McScript.log -parent FRAMEWORK -initiator 1 -installdir /opt/McAfee/agent//lib -taskid 6892] 2022-01-31 08:00:01 [98306] (16384) [LogLvl] [I] Initializing log level based on config.xml in /etc/cma.d 2022-01-31 08:00:01 [98306] (16384) [LogLvl] [I] Failed to initialize log level based on config.xml in /etc/cma.d. Using default configuration. 2022-01-31 08:00:01 [98306] (16384) [MueEep] [I] Initializing MUE EEP Script ID = 894815115 The McScript_deploy.log records the same error when a Product Deployment task is initiated: [LogLvl] [I] Initializing log level based on config.xml in /etc/cma.d [LogLvl] [I] Failed to initialize log level based on config.xml in /etc/cma.d. Using default configuration. [MueEep] [I] Initializing MUE EEP Script ID = 715767777 [crypto] [I] Crypto logger used <0x9f82938> [crypto] [I] Key imported successfully and recognized in RSA format [crypto] [I] Key imported successfully and recognized in RSA format [msgbus] [I] Added file watcher on broker config file </var/McAfee/agent/.msgbus/config.ini> [msgbus] [I] msgbus connectvity status : Connected [msgbus] [I] hash comparisons match failed [msgbus] [I] hash comparisons match failed [ma_client] [I] ma client is started Cause
The Linux system is low on disk space. This issue leads to the
[root@SGPRGC109384 /]#
To check file size through
NOTE: The output shows zero (0). total 4 -rw-r--r--. 1 root root 0 JAN 20 12:24 config.xml lrwxrwxrwx. 1 root root JAN 20 12:24 EPOAGENT3000 -> /etc/ma.d/EPOAGENT3000 Solution
To resolve the issue, remove McAfee Agent, and then install McAfee Agent manually:
Related InformationAffected ProductsLanguages:This article is available in the following languages: |
|