Issue Launching SmartEvent Settings and Policy

[Juan_Concepcion]

I have an upgrade R80.10 Management Station with a fresh R80.10 SmartEvent Server - Everything seems to install fine but when I go to launch the SmartEvent Settings and Policy it fails and just pops up the login window.  Also I see this constantly scrolling the $RTDIR/log/cpsemd.log - database install states it's been done successfully:

[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:38:25] Warning:cp_timed_blocker_handler: A handler [0x820a8a0] blocked for 5 seconds.
[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:38:25] Warning:cp_timed_blocker_handler: Handler info: Library [cpsemd], Function offset [0x1c28a0].
[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:38:25] Warning:cp_timed_blocker_handler: Handler info: Nearest symbol name [_ZN23CAutomaticPolicyBuilder33__sched_SchedListenToNotificationEPv], offset [0x1c28a0].
[CPSEMD 3898 4076292800]@wal-event-01[23 Aug 15:38:34] Failed to get myself object by sic name from sem_network_objects table. Try to reconnect.
[CPSEMD 3898 4076292800]@wal-event-01[23 Aug 15:38:34] Failed to get myself object by sic name from sem_network_objects table after reconnection too. Check if sem_network_objects table exists and contains the object.
[CPSEMD 3898 4076292800]@wal-event-01[23 Aug 15:38:34] CActiveProductsListCreator::SetAnalyzerStatus() - error getting myself object!!!
[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:38:55] Failed to get myself object by sic name from sem_network_objects table. Try to reconnect.
[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:38:56] Failed to get myself object by sic name from sem_network_objects table after reconnection too. Check if sem_network_objects table exists and contains the object.
[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:38:56] CActiveProductsListCreator::SetAnalyzerStatus() - error getting myself object!!!
[CPSEMD 3898 4076292800]@wal-event-01[23 Aug 15:39:08] CDBConfiguration::RefreshStatus() - Failed to calculate available DB max size.
[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:39:26] Failed to get myself object by sic name from sem_network_objects table. Try to reconnect.
[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:39:26] Failed to get myself object by sic name from sem_network_objects table after reconnection too. Check if sem_network_objects table exists and contains the object.
[CPSEMD 3898 3884960656]@wal-event-01[23 Aug 15:39:26] CActiveProductsListCreator::SetAnalyzerStatus() - error getting myself object!!!

[PhoneBoy]

Not sure if this SK applies to R80.10, but it seems like the same error message and is thus worth a shot: SmartEvent GUI is not able to connect to the new SmartEvent server after migration of database 

[Juan_Concepcion]

This is a brand new install – this is 3rd time server is installed and error message does not change. Am seeing that the database sync is failing –even though in SmartDashboard says it succeded -- seeing this in cpm.elg:

23/08/17 16:30:05,396 INFO db_sync.server.CpmSession : Logged in to SMC User on x.x.x.x

23/08/17 16:30:05,396 INFO db_sync.server.SyncTaskManager : Login took 368.9

23/08/17 16:30:11,412 WARN coresvc.internal.LoginSvcImpl : LoginSvcImpl-^{cpmiApplicationLoggedOut: application CpmiClientApplication{applicationName=}Eventia Analyzer Server^} does not exists in loggedInCpmiApplications set for session NqH2lKZked7p1wayRmSq47qVdkY8cdbDq-sZYbY1sH0

23/08/17 16:30:16,936 INFO db_sync.server.SyncFromSingleCpm : Sync completed with errors

23/08/17 16:30:16,936 ERROR db_sync.server.SyncFromSingleCpm : Sync failed, stopping this DBSync iteration

23/08/17 16:30:16,936 INFO db_sync.server.SyncTaskManager : Sync with x.x.x.x failed

23/08/17 16:30:17,588 INFO db_sync.server.SyncTaskManager : Logout took 0.7

[PhoneBoy]

Might be worth a TAC case to do some further troubleshooting.

[Juan_Concepcion]

I have one open – threw it into the forum since I know developers are also watching the threads. Synopsis is this that I’ve done several deployments and my experience has been that:

R80 – R80.10 Management

1. Management station upgraded from R80 to R80.10 (having had jumbo hotfix 76 applied previously) fails to sync to a brand new R80.10 management station – rebuild primary is not exactly the answer a customer wants to hear – 3 months later a solution was posted which finally worked

2. Same management station, which previously was synching fine with the R80 SmartEvent, after being upgraded to R80.10 is now unable to synchronize it’s database with the R80.10 SmartEvent which was rebuilt to fresh R80.10 in order to increase disk size.

R80.10 fresh install manager has no issues communicating to SmartEvent also built fresh with R80.10.

So the question is should a management station upgraded to R80.10 from R80 be able to successfully integrate with devices that are fresh installs of R80.10??

--Juan

[Artur_Sher]

Hi Juan,

What is your SR number ?

[Omri_Raizman]

Hi Juan 

it seems like DBSYNC mode is still configured for Pre-R80 management servers. 

please run the following test: 

#cd $CPDIR/registry 

#grep -i dbsync_mode HKLM_registry.data 

in case the output shows DBSYNC_MODE (PRE-R80), please run the following script in order to change dbsync mode to management R80. 

Execute the $RTDIR/scripts/SmartEvent_R80_change_dbsync_mode.sh script:

[Expert@HostName:0]# cd $RTDIR/scripts

[Expert@HostName:0]# ./SmartEvent_R80_change_dbsync_mode.sh R80

in case it configured correctly, please provide us with Service request number and we will be glad to assist. 

[PhoneBoy]

If you and https://community.checkpoint.com/people/artur72e8e4ce-fc03-383b-8bd7-907e32d9ca00‌ follow https://community.checkpoint.com/people/juan281c70fa-22fa-4d54-999b-8dc13f109429‌ he can provide the SR via a private message.

[Juan_Concepcion]

I will run through this with customer this afternoon.  This is however a fresh R80.10 installation.

[Juan_Concepcion]

grep -i dbsync_mode HKLM_registry.data <--- got nothing back on this

Still in broken state and I rebuilt machine and followed same path as management station

R80 - Jumbo 76 - R80.10 --> Jumbo 35

Still not able to get this to work

[Jean-Francois_1]

Hello,

Any updates about this problem ? I meet the same problem on a fresh install of a smartevent in R80.10 T462 HF70.

Thanks

[Juan_Concepcion]

Sorry for the late response.  You will need to have this escalated as it was resolved by R&D but no notes on how to fix.

Regards,

Juan

[Kfir_Dadosh]

Just to make sure:

 - Have you checked the SmartEvent login is pointing to the SmartEvent server IP?

 - Have you typed your credentials again and tried to login?

[Danny_Olson]

If this is the Juan Concepcion that I know, it was back in the day at Fishnet. So shout out to you Juan if that is the case. I think I am having the same issue as well. I just installed a fresh install R80.10 server with Take 91. I set it up as a logging server/smart event only. I want to hook it into an existing manager on R80.10 (on take 85). I setup a new checkpoint host in the R80.10 smart console from the manager. I enabled logging/status, and then smart event correlation/smart event server. I installed database to the object (worked fine it seems), and I could establish SIC just fine. I believe that I am to go into under logs and monitor, and then open the external apps (smartevent settings and policy), which opens up an R80.10 instance of smart dashboard login prompt to the new Smart event server, but you cant authenticate. I am still trying to get more info to see if I can get a better troubleshooting angle on this, but i figured i would post here to see where this thread was at if there was any new info that might i could use and try to run with it. 

[Juan_Concepcion]

It is he!!!! To begin they have to be same jumbo hotfix, I would start there.

--Juan

[FINAO_Managed_S]

HI Danny,

  Were you able to solve this issue? I am having exactly the same issue and not able to resolve it.

[Danny_Olson]

Cool. Thanks sir. 10-4!

[Kian_Ong_Tan]

Hi,

I have gone through sk113081, it ran successfully.

SIC with management already done successfully too.

Verified dbsync_mode in HKLM_registry.data and it shows DBSYNC_MODE (R80).

But my SE still does not show the log in the GUI, i noticed the log file (in $FWDIR/log) is increasing. However in SmartConsole it just didnt show the latest log. Tried logging in SmartEvent GUI but it pops out a message saying smartevent server is initializing since forever.

I already logged a case but seeing this post, i hope there is already a fix / solution to this.

Thanks.
Regards.

KianOng