How to collect data from the ePO and SQL servers for a Tomcat-related SQL connection leak
Last Modified: 2022-06-23 06:51:25 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
How to collect data from the ePO and SQL servers for a Tomcat-related SQL connection leak
Technical Articles ID:
KB92272
Last Modified: 2022-06-23 06:51:25 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10
Summary
This article describes how to collect data to help identify and troubleshoot extension-related connection leak issues. These issues are where the ePolicy Orchestrator (ePO) Application Server (Tomcat) service leaks connections to the SQL database. Such issues can potentially lead to port exhaustion and an inability for any new connections to be made to the SQL database. When the connection leak has escalated to this point, the ePO logon page might display a warning similar to the following: The Solution 1
IMPORTANT: The data collection steps below must be performed before ePO completely exhausts the available connection pool on the SQL Server. Implement the following recommendations when the ePO logon page displays the error message
COUNT(distinct SDEC.[most_recent_session_id]) FROM sys.[dm_exec_connections] SDEC CROSS APPLY sys.[dm_exec_sql_text](SDEC.[most_recent_sql_handle]) AS DEST GROUP BY Dest.Text ORDER BY 2 desc
Solution 2
Export the SQL Query results to a readable format:
Related Information
Key search words: Data Collection ePO
Affected ProductsLanguages:This article is available in the following languages: |
|