Endpoint Protection

Hello Everyone , Version of SEPM is 12.1.5 running in HA mode with 2 SEPMs and DB is hosted on a SQL server cluster with about 3000 endpoints.

I have recieved the following notification from the SEPM server

" The Symantec Endpoint Protection Manager database has gone down and needs immediate attention "

Kindly tell me which logs do I need to look into to identify the cause and fix it and secondly kindly also share the troubleshooting steps that I need to take to diagnose the problem of this problem ?

Your replies and suggestions would be highly appreciated.

Thanks & Regards

Enable debugging and post scm-server-0.log

Brian by putting in  scm.log.loglevel=FINEST . For how long should I run and then oist the scm-server-0.log .

Any other trouble shooting steps or logs other than this ?

Regards

It needs to run long enough to capture the issue.

Have you tried restarting the service or even rebooting the SEPM?

Brian now I am recieving this notification from both SEPMs 1 and 2 ,  time to time like after every one hour I am recieving this notification from both SEPMs

I haven't rebooted the SEPMs yet , should I restart both SEPMs or one ?

Check the SEPM services in services.msc. Are they off? I would try restarting them if so. Otherwise you can reboot the SEPMs

Ok thanks for your reply.

Does you have received notification ?

See this thread same error

https://www-secure.symantec.com/connect/forums/symantec-endpoint-protection-manager-database-has-gone-down

Does your console get forced logged OFF If yes then the alert is true.

Fix the communication issue between the SQL & SEPMs.

Check for packets drops.

Else,

False alert. remove notifications.