Notifications every minute for Single Risk Event
Created: 15 Aug 2012 | Updated: 17 Aug 2012 | 9 comments
This issue has been solved. See solution.
I have SEPM 12.1.1101.401 installed, both Standard and Small Business Edition.
They are configured to send "Single Risk Event" notifications via email with the default conditions.
Recently, on detected risks, I have been receiving repeated notifications at roughly 60-second intervals.
This sounds like this issue, but slightly different.
Just wondering if anyone else has experienced this.
Discussion Filed Under:
Comments 9 Comments • Jump to latest comment
Check this fourms.
https://www-secure.symantec.com/connect/forums/multiple-email-notification-when-new-risk-detected
https://www-secure.symantec.com/connect/forums/single-risk-event-e-mails-sep-12ru1mp1
Check this artical.
Single risk event notifications generate duplicate emails once every three minutes.
http://www.symantec.com/business/support/index?page=content&id=TECH190349
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
TECH190349 seems to be exactly on point. Thank you.
I am facing exactly the same issue. Is there any solution yet?
I hope Symantec people see this page and post the resolution.
Hi Umesh,
Are you still facing same issue?
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
HI Umesh,
If you don't mind please create New Forums and also give information.
What SEPM version are you using ?
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
Hi Chetan,
I am still facing the issue. I have deleted the old notification and added a new one but issue did not resolve.
Thanks,
Umesh
Hi Umesh,
As we know it's a known issue, public KB is available for the same.
http://www.symantec.com/docs/TECH144817
Symantec next release i.e. SEP 12.1 RU2 should have fixed to this problem.
Meanwhile could you check with following workaround:
Can you set the value of securitynotifytask.notifcation.interval to 59 in conf properties?
Add the following line to conf.properties.
scm.securityalertnotifytask.notification.interval=59
This change should create delay in multiple email response.
Also you can test it with SEP 12.1 RU2 beta version.
https://symbeta.symantec.com/login.html
If beta version did not resolve the issue, please immediately log a case with Support.
I hope it helps.
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Ashish,
Sorry if you feel offended. I an on the same version as mentioned above.
12.1.1101.401
HI Umesh,
Symantec is aware about this issue. The Issue seems to have been resolved in the Upcoming Version of SEP 12.1 RU2
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
Would you like to reply?
Login or Register to post your comment.