Can't disable or delete Trellix Active Response trigger
Last Modified: 2023-07-10 07:13:08 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Can't disable or delete Trellix Active Response trigger
Technical Articles ID:
KB92368
Last Modified: 2023-07-10 07:13:08 Etc/GMT Environment
Trellix Active Response (TAR) 2.4.2
Problem 1
When you try to disable or delete a custom trigger, it fails with a pop-up message in the ePolicy Orchestrator (ePO) manager: The org.springframework.dao.DataIntegrityViolationException: could not execute statement; SQL [n/a]; constraint [fk__mar_trigger_term_platform__trigger_term_id]; nested exception is org.hibernate.exception.ConstraintViolationException: could not execute statement org.springframework.dao.DataIntegrityViolationException: could not execute statement; SQL [n/a]; constraint [fk__mar_projection_output__projection_id]; nested exception is org.hibernate.exception.ConstraintViolationException: could not execute statement at org.springframework.orm.jpa.vendor.HibernateJpaDialect.convertHibernateAccessEx Problem 2
When you try to disable or delete a custom trigger, it fails with a pop-up message in the ePO manager: The "fk__mar_trigger_term_platform__trigger_term_id" on table "mar_trigger_term_platform" Detail: Key (id)=(221) is still referenced from table "mar_trigger_term_platform". System Change
You installed or upgraded to TAR Server 2.4.2 or 2.4.3.
Cause
A violation of a foreign key constraint in the TAR server Postgres database causes this issue. NOTE: The TAR server and Threat Intelligence Exchange (TIE) Postgres database are shared. Solution
This article will be updated when a new release fixing this issue is posted to the Product Downloads site. NOTE: Any future product functionality or releases mentioned in the Knowledge Base are intended to outline our general product direction and should not be relied on, either as a commitment, or when making a purchasing decision. To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
Workaround 1
If you see the IMPORTANT: Prerequisites before you run the commands in the following steps:
Workaround 2
If you see the catalina.out file errors shown in Problem 2: IMPORTANT: Prerequisites before you run the commands in the following steps:
Affected ProductsLanguages:This article is available in the following languages: |
|