安装 ePO 5.10 更新13后,EventParser 服务无法启动
技术文章 ID:
KB95813
上次修改时间: 2023/04/28
上次修改时间: 2023/04/28
免责声明
本文内容源于英文。如果英文内容与其翻译内容之间存在差异,应始终以英文内容为准。本文部分内容是使用 Microsoft 的机器翻译技术进行翻译的。
了解不断适应的 XDR 生态系统如何为您的企业赋能。
Trellix 首席执行官 Bryan Palma 解释称,现在亟需能够不断学习的安全防护。
下载 Magic Quadrant 报告,该报告根据执行能力和愿景完成情况,对 19 家供应商进行了评估。
Gartner 报告称,“XDR 是一种新兴技术,可以提供增强的威胁防护、检测和响应。”
企业在 2022 年应警惕哪些网络安全威胁?
网络安全行业绝不是一潭死水,而是危机不断,现在便是接受这一全新安全防护理念,将其转化为自身优势,为企业赋能的最佳时机。
网络安全领域备受信赖的两大领导者携手打造弹性化的数字世界。
Trellix 首席执行官 Bryan Palma 解释称,现在亟需能够不断学习的安全防护。
安装 ePO 5.10 更新13后,EventParser 服务无法启动
技术文章 ID:
KB95813
上次修改时间: 2023/04/28 环境
ePolicy Orchestrator (ePO) 5.10 更新13
摘要
EPO DB 驱动程序会升级到, 累积更新(CU)13包捆绑 问题
安装 ePO 5.10 CU 13 后,EventParser 服务不会启动。 以下错误记录在文件中 ERROR: The system was unable to find the specified registry key or value. 2022-06-09T00:48:23.062Z - info: ***arg list for unblock msoledb msi*** 0=-Command, 1=Unblock-file, 2='C:\Users\RGC\Desktop\ePO_5.10.0_Update_13\resources\app\MSOLEDB\msoledbsql_x64.msi' 2022-06-09T00:48:24.986Z - info: Successfully unlock the MSOLEDB msi file. 2022-06-09T00:48:24.986Z - info: ***arg list for installing msoledb driver*** 0=/q, 1=IACCEPTMSOLEDBSQLLICENSETERMS=YES, 2=/L*V, 3="%TEMP%\msoledbsql_x64_Inst.Log", 4=/norestart 2022-06-09T00:59:19.956Z - info: stdout for MSOLEDB: 2022-06-09T00:59:19.956Z - info: MSOLEDB driver installation failed 2022-06-09T00:59:19.975Z - info: Query execution failedConnectionError: Failed to connect to RGCEPO:1433 - read ECONNRESET 2022-06-09T00:59:19.975Z - info: Update with Id CU-13 is not installed on this system, start installing 该 MSI (c) (BC:78) [12:16:05:042]: Resetting cached policy values MSI (c) (BC:78) [12:16:05:042]: Machine policy value 'Debug' is 0 MSI (c) (BC:78) [12:16:05:042]: ******* RunEngine: ******* Product: C:\Users\RGC\Desktop\ePO_5.10.0_Update_13\resources\app\MSOLEDB\msoledbsql_x64.msi ******* Action: Property(S): ProductToBeRegistered = 1 Property(S): ReplacedInUseFiles = 1 MSI (s) (44:EC) [12:16:37:299]: Note: 1: 1707 MSI (s) (44:EC) [12:16:37:300]: Product: Microsoft OLE DB Driver for SQL Server -- Installation completed successfully. MSI (s) (44:EC) [12:16:37:301]: Windows Installer installed the product. Product Name: Microsoft OLE DB Driver for SQL Server. Product Version: 18.6.3.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. MSI (s) (44:EC) [12:16:37:302]: Value of RebootAction property is MSI (s) (44:EC) [12:16:37:302]: Windows Installer requires a system restart. Product Name: Microsoft OLE DB Driver for SQL Server. Product Version: 18.6.3.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Type of System Restart: 2. Reason for Restart: 1. MSI (s) (44:EC) [12:16:37:303]: Product: Microsoft OLE DB Driver for SQL Server. Restart required. The installation or update for the product required a restart for all changes to take effect. The restart was deferred to a later time. MSI (s) (44:EC) [12:16:37:341]: Deferring clean up of packages/files, if any exist MSI (s) (44:EC) [12:16:37:342]: MainEngineThread is returning 3010 MSI (s) (44:60) [12:16:37:400]: RESTART MANAGER: Session closed. MSI (s) (44:60) [12:16:37:400]: No System Restore sequence number for this installation. === Logging stopped: 6/9/2022 12:16:37 === MSI (s) (44:60) [12:16:37:426]: User policy value 'DisableRollback' is 0 MSI (s) (44:60) [12:16:37:426]: Machine policy value 'DisableRollback' is 0 MSI (s) (44:60) [12:16:37:426]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (44:60) [12:16:37:426]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (44:60) [12:16:37:436]: Note: 1: 2265 2: 3: -2147287035 MSI (s) (44:60) [12:16:37:439]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (44:60) [12:16:37:444]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (s) (44:60) [12:16:37:463]: Destroying RemoteAPI object. MSI (s) (44:F0) [12:16:37:464]: Custom Action Manager thread ending. MSI (c) (BC:78) [12:16:37:474]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (BC:78) [12:16:37:475]: MainEngineThread is returning 3010 === Verbose logging stopped: 6/9/2022 12:16:37 === 以下错误记录在( source=ADODB.Connection, desc=Provider cannot be found. It may not be properly installed., msg=Unknown error 0x800A0E7A 20220630213031 E #08116 EPODAL ePOData_Connection.cpp(381): COM Error 0x800A0E7A, source=ADODB.Connection, desc=Provider cannot be found. It may not be properly installed., msg=Unknown error 0x800A0E7A 20220630213031 E #08116 EPODAL ePOData_Connection.cpp(406): Error 0x800A0E7A returned from credentials callback. Database NOT available 20220630213031 E #08116 EVNTPRSR D:\BUILD_764249\BUILD\ePO\dev\src\server\include\ePOData.inl(461): Database initialization: Failed (hr=0x800A0E7A). 20220630213031 E #08116 EVNTPRSR source\servinit.cpp(164): Failed to initialize database layer. Cannot continue. 20220630213031 I #08116 EVNTPRSR EventParser Stopped. 20220630213031 I #08116 EVNTPRSR Cleaning up Server... 事件查看器( The installation or update for the product required a restart for all changes to take effect. The restart was deferred to a later time. 7B 34 44 34 35 34 42 41 42 2D 41 31 46 37 2D 34 39 32 44 2D 39 33 30 30 2D 35 42 46 30 35 44 42 33 30 42 45 42 7D 2C 20 33 30 31 30 原因
在 ePO 服务器上挂起的重新启动会中断,以通过 CU 更新进行安装 解决方案
重新启动 SQL server 以清除挂起的重新启动 并手动执行该 注意: 的文件路径 为 此操作有助于成功重新建立 ePO DB 连接。 如果 ePO 服务器上安装了 SQL,则需要重新启动 ePO 服务器。 免责声明本文内容源于英文。如果英文内容与其翻译内容之间存在差异,应始终以英文内容为准。本文部分内容是使用 Microsoft 的机器翻译技术进行翻译的。
|
|