When the gathering job is collecting data from the custom data source logs, it may hang and needs to be forcibly stopped to release the task workflow (otherwise it prevents subsequent jobs in the current task to start).
When gathering certain number of files the message that is sent to InTrust Server may exceed the receipt buffer which causes GatheringEngine.exe process to hang. The number of files depends on the length of full path to the folder that contains these files.
This issue can be resolved by increasing the value of the following organization parameter in the Intrust Configuration database:
The default value is 32768. The recommended technique is to double the value, restart the Quest InTrust Server service and see if this resolves the issue. If it doesn't, then double the value and restart the service again.
To change the value of an organization parameter in InTrust 9.5.x, run a SQL query on the InTrust configuration database. For this specific parameter, the query will look like:
(Note: Always back up Intrust configuration database before running the T-SQL script below)
SET [Value] = '<value>'
WHERE [Name] = 'cc_stream_packet_size'
The problem was noticed while gathering Checkpoint and Pix logs.