-
Title
Change Auditor Client hang or crashes when trying to assign a configuration to an agent -
Description
The client will either lock up or crash when applying an agent configuration. -
Resolution
Review of the Change Auditor logs shows the following warnings logged:
"Too many events in Scheduler task queue: 1003 (maximum: 1000), cannot accept more."
Agents log may show: "Coordinator FQDN (GUID) ...busy, suspending event forwarding for 60 seconds..."
The SQL server may show numerous 'changeauditor.dbo.usp_agentconfiguration_read' pending or being attempted.
Check to see if the Polling Interval for each Configuration has been lowered from the default of 900 seconds. If so, try increasing it to 7200 (2 hours):
- Open the CA Client
- Click View | Adminsitration
- Select Configuration
- Click Configuration
- Select each Configuration. If the Polling Interval is less than 900, increase it to 7200. Also try increasing the interval to 7200 if it is still set to 900, but there are a large number of agents deployed (1000's)
NOTE: By changing the Polling Interval to 7200, the agents will now only check for Configuration changes every 2 hours instead of the default of 15 minutes.
It will take some time for the agents to get the new setting as they all have to refresh their configurations. Allow a few hours before troubleshooting further.
You can also try increasing the SQL timeout values on the coordinator:
SQL Command TimeoutLocation: RegistryVersion 6.0 and earlier Path:HKEY_LOCAL_MACHINE\SOFTWARE\Quest Software\ChangeAuditorVersion 6.5 and later Path: HKEY_LOCAL_MACHINE\SOFTWARE\Quest\ChangeAuditorValue Name: SQLTimeoutValue Type: DWORDValue: Default 30 seconds (decimal)Value: Maximum time in seconds for SQL command to execute. Impacts most client and Coordinator queries.Note: Start with 300 seconds (decimal).Bulk SQL Command TimeoutLocation: RegistryVersion 6.0 and earlier Path: HKEY_LOCAL_MACHINE\SOFTWARE\Quest Software\ChangeAuditorVersion 6.5 and later Path: HKEY_LOCAL_MACHINE\SOFTWARE\Quest\ChangeAuditorValue Name:BulkSQLTimeoutValue Type: DWORDValue: Default = 30 seconds (decimal)Value: Maximum time in seconds for bulk SQL command to execute. This includes bulk insertion of SQL events from agents.Restart the Coordinator service either from the Coordinator Systray icon or from the Service.msc applet.Please note: If you have an older non-Quest branded version of Change Auditor, the folder path will include the non-Quest branded name instead of ‘Quest'Quest does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry” at Microsoft Support (http://support.microsoft.com/default.aspx?kbid=256986)