Guest

Preview Tool

Cisco Bug: CSCvt57222 - Reporting on SMA stalls if certain reporting data from WSAs result in IndexError

Last Modified

Jun 19, 2020

Products (1)

  • Cisco Content Security Management Appliance

Known Affected Releases

12.5.0-636 12.5.0-658

Description (partial)

Symptom:
Reporting on Cisco Security Management appliance will stop working after SMA shows below error in reportd logs 

Encountered error while processing export files: ('db/row.py merge_raw_data|196', "<type 'exceptions.IndexError'>", 'list index out of range', '[aggregator/master_aggregator.py _process_export_files|593] [aggregator/master_aggregator.py _process_db_files|1019] [aggregator/master_aggregator.py _process_db_rows|1041] [db/write_api.py write|153] [db/table.py write_row|984] [db/table.py _insert_using_row_exists_strategy|937] [db/table.py _merge_row|887] [db/row.py merge|206] [db/row.py merge_raw_data|196]')

Conditions:
1) Cisco Advanced Malware Protection (AMP) enabled on WSA
2) WSAs configured for centralized reporting with SMA
3) Race condition on WSA causing un-parseable reporting data to be generated and sent to SMA
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.