Old Clients Showing Up in Reports
We recently upgraded to MR4-MP1a in our environment (so far not the best choice I have made). Since then when we check the Computer Status Logs for machines that have checked in during the last 24 hours it now incorrectly reports on machines whose last check-in date is 1/1/1970. I can guarantee you 1/1/1970 is not within the last 24 hours. All of these machines are SAV clients that are offline (our SAV servers report to our SEPM servers for reporting). In addition all the data is missing (client version, definitions, last scan, etc).
This issue was not around in MR2 but as soon as we upgraded to MR4 there it was. This basically means that our reports and logs are now useless since all these machines are being incorrectly reported.
Anyone else seen this issue? Is there an easy fix or am I screwed until Symantec releases MR5?
Jeff
Comments
Not reporting in
The date 1/1/1970 would probably be what the software interprets as 'null'.
The clients have not reported to the server since you mentioned that they're offline. Trying to get them to connect to the server would solve the issue on the dates. Unless these PCs are no longer in use. Do they receive definition updates?
“Your most unhappy customers are your greatest source of learning.”
Old Clients Showing Up in Reports (Part 2)
Yeah, I assumed the 1/1/1970 probably had to do with missing a last check-in value, which is odd since some of these machines were taken offline just this month, so they should have had a last check-in date.
But to answer your question, most of these machine appear to be old SAV clients that are no longer online from what I can tell. Our DB maintenance is suppose to clear out older machines, but not sure it is working right. Like I said, this issue was non-existent until we upgraded to MR4-MP1a.
Thanks,
Jeff
You could either check the
You could either check the maintenance schedule if this was disabled or if the settings have been changed. You could also be experienceing some problems with the database, either it is corrupted or full. If it is also possible, try connecting one of the offline PCs, have it updated, and see if its status will change.
We are also having some problems with the date. Some PCs have the last checkin date as 12 hours in the future even if the system clocks are set at the same timezone.
“Your most unhappy customers are your greatest source of learning.”
Possibly an update to MR4_MP2
Possibly an update to MR4_MP2 might help here? Especially with clearing out database logs so that the machines can recontact and update their information maybe.
https://www-secure.symantec.com/connect/forums/sep-mr4-console-reporting-badold-data
Cheers,
Rob
Upgrade to MR5 Fix ID:
Upgrade to MR5
Fix ID: 1391394
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid_p/2007121216360648
Would you like to reply?
Login or Register to post your comment.