Control Compliance Suite

I recently installed a new ECS server version 10.5. We have been running 8.6 for a long time but licensing was not supported anymore and we had no choice but to go with the newest version in order to accommodate more users.  Since we did not choose the upgrade path, everything was installed from scratch.

I installed the new ECS, setup all the QE’s, fine tuned all the query settings and distribution rules. Everything seems to run fine while testing basic queries, just noticed all our bigger reports take double the time to complete when compared with version 8.6. After some investigating I noticed the 10.5 master QE was doing all the work, it was not passing out jobs to the other QE sources. Just recently I have applied all the hot fixes and I’m currently on version 10.50 SP1.  I have triple checked all my setting and they are basically the same as with 8.6 when I compare them side by side... same problems even after hotfixes.

 One thing I noticed on the ESC server is that the Enable Firewall Exception registration setting under QE setting, Advanced Security is blanked out. Could it be because the server is a VM box? I can’t enable or disable it and this is bothering me. Anyone know why this setting is disabled and how I can turn it back on? Any ideas on why my jobs are not being distributed to the other available QE engines? I’m out of idea.

PLEASE HELP!

Just an FYI ... there is nothing in logs and there are no errors anywhere.

I'm prob going to mention some things you've already looked at in all of this...sorry if its stuff you've already done.

I'd check my health and status on the BVIS to make sure that the MQE has the SQE's associated and that they're all the same version. I've had to re-run the QE hotfix a time or two to make sure they're all up to date.

You could also go into the ECS and check out the associations as well though pending on the number the health and status check might be easier. I honestly do not recall after our upgrade from 8.6 (which went to 9) if you had to re-establish any of this or re-setup the QE for atomic jobs and such...though that would seem doubtful that you'd have to

 Thanks for replying to my post earlier, really appreciate it. I sort of regret not upgrading now :(

I have now spent about three weeks trying to figure this out... I have run the health and status check, reinstalled the hot fixes about a dozen of times now. I have also reconfigured and reinstalled the ECS server twice with no improvements. I do think my install is messed up since the last technician applied the service pack on the system before applying one of the hot fixes first.

What is the proper process to follow when applying these hot fixes / service pack to a base install anyway? I have been reading more about hot fixes and learned that they need to be installed in a proper order, otherwise some fixes will not register. I really think I’m having this problem. The reason I say this is because I just tried applying the new 2011-3 hot fix. When I run it, I only get the option to reinstall / fix. This tells me that the installation thinks I already have it since the upgrade also comes up blank. I know I don’t have this latest 2011-3 fix because of a couple reasons:

1. The file versions of my .DLL files I currently have, specifically BVNTObjects.DLL, is at version 10.50.129.20100. The 2011-3 hot fix files are at version 10.50.129.20104.
2. Under the Query Engine Setting, Jobs tab, I’m still getting the integer error when I have the *execution Max Retry set higher then 10. This 2011-3 version is supposed to fix this.
3. My file version summary doesn’t list any Hot Fix applied and the CHF is at 1. It just doesn’t jive with what I have installed thus far… I think.

In conclusion I think I need to start over with the base install and apply all the fixes in their proper order. Does anyone know what order these hot fixes and service packs need to be installed in? Can someone also post the links to download all the proper fixes I need in their order? One more thing.. Is there a way to remove the current service pack and basically get back to the base install without having to start from scratch?

Thank you in advance.  

Under the Distribution Rules on your MQE there is a little icon that has the pair of glasses on it that will analyze your distribution rules and show which machines will go to the different SQE's.   If you hover over it it will say "View Results of Distribution Rules"  Make sure you are getting the results you expect with regard to your distribution rules there.    Also, under the query engine settings, look at the SQE Usage tab and make sure your SQE's are in the "Selected Query Engines" column.   If that doesn't work, maybe starting over might help.

If you think you need to reinstall, then try uninstalling the Query Engines first and then reinstalling.  another option could be to promote one of the SQE's to MQE and then demote the current MQE.

Hope this helps.

I am having the same exact issues here. Where my MQE is doing all the work despite having the distribution rules set for the SQE's.  I have two cases open with Symantec on this and spent 6 hours on the phone with them the other day, they were unable to solve the issues and escalated them.  My install was a full (new) install, so I am forced to wait it out.

Get the patch 2011-4, it fixes a bunch of weird performance \ communication issues. It also fixes issues with BVIS and QE installed on different domains. I think the main problem was mostly because targeted workstation reports were using server licenses, this patch fixes all this. 

Here is a link to the update file (1.4 gig) and the PDF:

ftp://ftp.symantec.com/public/english_us_canada/products/symantec_control_compliance_suite/10.5.1/Updates/Data_Collectors/CCS_DataCollection_10_5_1_PCU_2011-4_Win.exe

ftp://ftp.symantec.com/public/english_us_canada/products/symantec_control_compliance_suite/10.5.1/Updates/Data_Collectors/ReadMe_CCS_DataCollection_PCU_2011-4.pdf

Also what helped my situation out before the patch was to make sure you configure your distrabution default rule QE servers, something I totally overlooked and stumbled upon while rebuilding my server. Simply right click on an empty spot when in the distrabution rule screen and select Default group.. Once there move over all your local QE's that you need. This should help resolve your problem.

Good luck... I feel your pain!