Hi Sandro,
For your issue, please refer to ISS Knowledgebase with answer id is
2878 or you can read it on below.
I'm on Service Pack 4; why do I get EventCollector_Errors saying "Event
Queue is Full"?
Article Details
The full errors from the Event Collector Central Alerting Event Queue are
normal on a SiteProtector Service Pack 4 system. Starting with Event
Collector 1.9, a new component was introduced into the Event Collector to be
compatible with Service Pack 5. This new component is the source of the
errors.
The errors can appear in the Windows Application logs and as
EventCollector_Error events with a message that states:
(EventCollector_<hostname>) - Central Response's Event Queue is full.
This information applies to:
SiteProtector SP4
Fix Version:
N/A
Related Articles:
See Below
Answer
The best options stop this error from occurring are to:
- Upgrade to Service Pack 5. This will make the Event Collector fully
compatible.
OR
- Turn off the EventCollector_Error messages by right clicking on your Event
Collector, editing the properties, and unchecking the EventCollector_Error
alerts.
If you do not wish to do either of these, it is also possible to disable the
CAC component which is causing the errors. However, this is not recommended
because the changes must be reversed before upgrading the Event Collector or
the SiteProtector Core.
If you choose this option, make absolutely sure you are at Service Pack 4
and not Service Pack 5. Once you have verified you are at Service Pack 4,
perform these steps:
1. Stop the issDaemon service on the Event Collector machine
2. From the installation directory for the Event Collector, typically:
\Program Files\ISS\RealSecure SiteProtector\Event Collector\ rename the
'current.policy' file as 'current.policy.cac-backup'
3. COPY (Do NOT move) the file ..\Event
Collector\RSEvntCol69_WINNT_XXX_ST_1_9_uninstall\current.policy to ..\Event
Collector\
4. Restart the issDaemon service on the Event Collector. This effectively
disables support for the new feature within the Event Collector for
SiteProtector 2.0 SP5.
***Please Note***: It is extremely important that these changes be reversed
BEFORE SiteProtector SP5 or any future Event Collector XPU is applied.
If this article still can't solve your issue, please ISS Technical Support.
Regards,
Slamet F.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Poppi, Sandro
Sent: Monday, February 07, 2005 2:36 PM
To: '[email protected]'
Subject: [ISSForum] Event Collector Event Queue full
Hi,
I'm getting thousands of the folowing messages for Event Collector:
Central Response's Event Queue is full.
I didn't find a way to handle this or get rid of them. Could someone give me
some hints?
I'm still on Siteprotector SP4 but every other component including EC is up
to date.
TIA,
Sandro
_______________________________________________
ISSForum mailing list
[email protected]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________
ISSForum mailing list
[email protected]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
