Loading...

Knowledge Center


Endpoint Security console cannot display Event Logs
Technical Articles ID:   KB89763
Last Modified:  10/9/2017
Rated:


Environment

McAfee Endpoint Security (ENS) Threat Prevention 10.x

Problem

After opening the ENS console, the following error message displays:
 
Error communicating with the Event Log

Log entries similar to the following exist in the EndpointSecurityPlatform_Errors.log:
 
3972 08/25/2017 05:15:29.482 PM MFEConsole(6792.7676) MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): EM - invokeMethod ( [2723224,"Query",{"SQL_Columns":"ThreatTimestamp,AttackVectorType","SQL_Where":"AttackVectorType >= 1 AND AttackVectorType <= 7 AND TechnologyName <> 'Self Protection'","SQL_OrderBy":"rowid DESC","SQL_Limit":1}]) : operation returned non-success: BL_ERROR_FAILED_INVOKE_METHOD

3973 08/25/2017 05:15:29.503 PM MFEConsole(6792.7676) MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): EM - invokeMethod ( [2723224,"RowCount",{"SQL_Columns":"ThreatTimestamp","SQL_Where":"AttackVectorType = 1 AND TechnologyName <> 'Self Protection'","SQL_OrderBy":"rowid DESC","SQL_Limit":1}]) : operation returned non-success: BL_ERROR_FAILED_INVOKE_METHOD

3974 08/25/2017 05:15:35.295 PM MFEConsole(6792.7676) MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): EM - invokeMethod ( [2723224,"RowCount",{}]) : operation returned non-success: BL_ERROR_FAILED_INVOKE_METHOD

3975 08/25/2017 05:15:37.233 PM MFEConsole(6792.7676) MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): EM - invokeMethod ( [2723224,"Query",{"SQL_Columns":"ThreatTimestamp,AttackVectorType","SQL_Where":"AttackVectorType >= 1 AND AttackVectorType <= 7 AND TechnologyName <> 'Self Protection'","SQL_OrderBy":"rowid DESC","SQL_Limit":1}]) : operation returned non-success: BL_ERROR_FAILED_INVOKE_METHOD

3976 08/25/2017 05:15:37.249 PM MFEConsole(6792.7676) MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): EM - invokeMethod ( [2723224,"RowCount",{"SQL_Columns":"ThreatTimestamp","SQL_Where":"AttackVectorType = 1 AND TechnologyName <> 'Self Protection'","SQL_OrderBy":"rowid DESC","SQL_Limit":1}]) : operation returned non-success: BL_ERROR_FAILED_INVOKE_METHOD

Cause

The event database file (DADEvents.db) is corrupt.

Solution

This issue is resolved in Endpoint Security 10.5.2 Hotfix 2; contact Technical Support to obtain the hotfix.

Solution

This issue is resolved in Endpoint Security 10.5.3, which is available from the Product Downloads site at: http://mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Updates are cumulative; Technical Support recommends that you install the latest one.

Workaround

To fix a system that is in this state:
  1. Disable Self Protection in the ENS console in the Endpoint Security Common policy.
  2. Delete the DADEvents.db file located in the ENS data directory (C:\ProgramData\McAfee\Endpoint Security).
  3. Restart the ENS console. The DADEvents.db file will be recreated and the error will no longer occur.
  4. Re-enable Self Protection.

Rate this document

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.