Single Risk Event E-mails in SEP 12RU1MP1

Created: 15 Jun 2012 | 13 comments

c_olson

Good morning,

Since updating SEPM to 12RU1MP1, whenever we get a Single Risk Event we're getting an e-mail every 3 minutes for roughly an hour on the same event. I've tried deleting the notification condition and recreating it but the results are the same. I tried changing the damper from auto to an hour as well but again, the results were the same. This was not an issue for us in 11RU7.

Anyone else experiencing similar issues or know what can be done to correct this?

Thank you.

Discussion Filed Under:

Security, Endpoint Protection (AntiVirus) - 12.x, Endpoint Protection (AntiVirus), Security Risks, Configuring, Features, Monitoring, Performance, Tip/How to, Troubleshooting

Comments RSS Feed

Comments 13 Comments • Jump to latest comment

Simpson Homer Symantec Employee

Single Risk Event E-mails in SEP 12RU1MP1 - Comment:15 Jun 2012 : Link

How many logins do you have for SEPM? Are there more than one person trying to access SEPM?

Login as an Admin which has all privileges and also make sure that its password is set to never expire. And then delete the existing notification and then re-create the same and see if it helps.

Mithun Sanghavi Symantec Employee Technical Support Accredited

Single Risk Event E-mails in SEP 12RU1MP1 - Comment:15 Jun 2012 : Link

Hello,

Symantec is aware about this issue. The Issue seems to have been resolved in the Upcoming Version of SEP 12.1 RU2

I would request you to create a case with the Symantec Technical Support on the same.

QuickStart Guide - Create and Manage Support Cases in SymWISE

http://www.symantec.com/docs/HOWTO31132

How to update a support case and upload diagnostic files with MySupport

http://www.symantec.com/docs/TECH71023

To Call Symantec Technical Support :

http://www.symantec.com/business/support/assistance_care.jsp

http://www.symantec.com/enterprise/support/contact_techsupp_static.jsp

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

c_olson

Single Risk Event E-mails in SEP 12RU1MP1 - Comment:15 Jun 2012 : Link

I created a case on it and have tried creating the notification with the admin role instead of a domain admin. I'll monitor until we receive a new notification and follow up.

c_olson

Single Risk Event E-mails in SEP 12RU1MP1 - Comment:22 Jun 2012 : Link

We received our first alert after recreating the notification with the admin (not domain admin, which we had already tried). Still receiving notifications every 3 mins for the same alert.

Brian81 Trusted Advisor

Single Risk Event E-mails in SEP 12RU1MP1 - Comment:22 Jun 2012 : Link

Was the original admin that created the alert deleted from the system without first deleting the alert?

SEP Knowledge Base

Endpoint SWAT

c_olson

Single Risk Event E-mails in SEP 12RU1MP1 - Comment:22 Jun 2012 : Link

Nope. Admin created the original alert. I deleted it and created it again (domain admin). Then I deleted the one created by the domain admin and created it as an admin.