Guest

Preview Tool

Cisco Bug: CSCvs61421 - Reconfigure of SFDataCorrelator taking too long due to long host timeout

Last Modified

Apr 14, 2020

Products (29)

  • Cisco Firepower Management Center
  • Cisco FirePOWER Appliance 8360
  • Cisco FirePOWER Appliance 8260
  • Cisco FirePOWER Appliance 7050
  • Cisco FirePOWER Appliance 8120
  • Cisco AMP 7150
  • Cisco AMP 8150
  • Cisco FirePOWER Appliance 8350
  • Cisco FirePOWER Appliance 8130
  • Cisco FirePOWER Appliance 8140
View all products in Bug Search Tool Login Required

Known Affected Releases

6.1.0

Description (partial)

Symptom:
FMC receives only a few events because SFDataCorrelator is frequently reconfiguring and taking a very long time to reconfigure. Here are longs showing that eventing is paused for a very long time due to reconfigure taking a long time:

Dec 15 14:12:42 glic-all-fmc2 SF-IMS[14444]: [15511] SFDataCorrelator:DCEControl [INFO] DCEControlMessageReconfigure
Dec 15 14:12:42 glic-all-fmc2 SF-IMS[14444]: [15511] SFDataCorrelator:DCEControl [INFO] Pausing Event handlers
Dec 15 15:03:29 glic-all-fmc2 SF-IMS[14444]: [15511] SFDataCorrelator:DCEControl [INFO] Resuming Event handlers
Dec 15 15:03:29 glic-all-fmc2 SF-IMS[14444]: [15511] SFDataCorrelator:DCEControl [INFO] Reconfigure completed successfully

Conditions:
When rna_scan_reference table has a lot of entries. This table is populated when the customer is using Host Input, so this bug is hit when the customer has a lot of hosts in their Network Map, and when they are inputting lots of data using Host Input.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.