Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Lue.log files filled with error

Created: 27 Feb 2014 • Updated: 01 Mar 2014 | 10 comments
This issue has been solved. See solution.

Hello,

Oftenly SEPM does not download the latest definitions.

I tried the following steps: 

Uninstall and reinstall liveupdate

Repair the SEPM

Manual update of SEPM

Manual removal of SEPM definitions.

Any other thoughts?

Operating Systems:

Comments 10 CommentsJump to latest comment

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

Could you share the exact error messag or log file itself?

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Rafeeq's picture

Most of the times it will be because of disk space, 

if you are passing through a firewall and content filtering enabled it does not work sometimes

are you downloading from internet or luadmin?

JS@support's picture

Error says "Decompression failed  for package..."

Rafeeq's picture

Whats the exact version of SEP? I see a bug in previous version

LiveUpdate is unable to decompress the virus definition updates despite ample room on the system
Fix ID: 2847004
Symptom: Symantec Endpoint Protection client will run LiveUpdate and successfully download updated content, but occasionally cannot apply the updates.  “Decompression failed for package…” errors appear in the lue.log files.
Solution: The updated LiveUpdate Express included in RU2 MP1 updates the decompression process to use less memory, which allows the extraction to occur.
http://www.symantec.com/business/support/index?page=content&id=TECH204685
Chetan Savade's picture

Hi,

If it's a SEPM 12.1 RU2 or any prior version of the SEPM then it can be a known issue.

Go through the following fix id, listed in RU2 MP1 fix notes:

LiveUpdate is unable to decompress the virus definition updates despite ample room on the system
Fix ID: 2847004
Symptom: Symantec Endpoint Protection client will run LiveUpdate and successfully download updated content, but occasionally cannot apply the updates.  “Decompression failed for package…” errors appear in the lue.log files.
Solution: The updated LiveUpdate Express included in RU2 MP1 updates the decompression process to use less memory, which allows the extraction to occur.
 
Reference: New fixes and features in Symantec Endpoint Protection 12.1 Release Update 2 Maintenance Pack 1
 
 
I would recommend to upgrade to the most latest version of SEPM i.e. SEPM 12.1 RU4a to stay more protected.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Chetan Savade's picture

Still I would recommend to upgrade to the most latest version of SEPM i.e. SEPM 12.1 RU4a.

Upgrade to the latest version and verify if issue still persist or not.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

SOLUTION
Rafeeq's picture

Whats the version of IE?

Does this happen all the time ?

Do you use proxy/ firewall 
 

SEPM is updated via internet or Luadmin?

Do you have any winzip utility installed? anything which extracts .zip file?

A. Wesker's picture

Hi,

For SEPM LiveUpdate troubleshooting, we need Log.LiveUpdate and SesmLu-0.log after reproduction of the issue.

If you look the Log.Lue it's dedicated for LiveUpdate session from the SEP clients when you run the update from Internet (symantec live update servers) and not the SEPM.

Kind regards,

A. Wesker

JS@support's picture

Yesterday midnight we performed an upgrade and issue no longer exist now.