wind-e

Does anyone have any ideas on how to clear the server log queue?

We recently upgraded our ERA instance (and half of our end user agents) to version 6.4, and about a month later to version 6.5. Most agents are on currently on 6.5, but there are still some lingering 6.4 and 6.1 end user agents. We used to use the “Remote Administrator Agent – Application Reporting – Report all installed” policy in ESET Remote Administrator to report all applications on our endpoints (see first screenshot) in version 6.1. This policy is no longer being applied to any computers (see second screenshot) in version 6.5. While we upgraded to ERA 6.4, we left this policy in place and ALSO created a custom Agent policy that ALSO enabled reporting of applications (see third screenshot). Both of these policies were in place reporting applications for about 2 weeks. During this time period, our era_db database grew about 500% in size until it was realized that having both policies enabled to report applications may be causing this. Sure enough, after eliminating the redundant policy (we now exclusively use our custom agent policy), that database stopped growing. We have now upgraded our ERA instance to 6.5 and everything runs smoothly, but we would like to clean up our mistake if possible. The two lingering issues are: The database size (we would like to shrink from ~20GB back down to ~3GB, but how?). How to clear the server log queue that appears to hit our database server hard at midnight every night. Here is a snapshot of our top tables by disk usage for our era_db database in MSSQL: Do you have any suggestions on how to resolve the two issues (database size and clearing server log queue)?

Hey hey, what do you know? "--silent" and "--accepteula" runs the install in it's entirety (albeit installer is seen during the entire run)! I'll play with it some more next week and see if there's any other combinations that might work to get it silent. Thanks @MartinK -- if you come across a way to make it please silent let me know.

I've created a few different all-in-one installation packages from the ERA Web Console (some with policies specified, some without, some with parent group specified, others without) and I can't seem to figure out why the silent installation of these packages aren't working. I can run them normally (non-silently) and they run and complete just fine. I've followed the steps here on how to run a silent install using the "--silent" and "--silent --avr-disable" parameters, but while the installation appears to start (the ESET package wizard actually appears), it ends after only a few seconds. The wizard will show the screenshot below, and then disappear and nothing is ever installed. Is there something in the all-in-one package that can't be specified in order for the silent installation to work (like policies, parent group, etc)? Is silent all-in-one packages created by ERA 6.5 not possible? We'd like to incorporate the all-in-one package into our imaging process but can't get it to install silently!

hxxp://support.eset.com/kb5949/#ERA Technically not in upgrade instructions, but it's still documented. ....I didn't read this either beforehand.

@CraigB Just finished trying to upgrade to 6.5 again. This time it was a success! Took about 1 hour.

I plan on trying again tomorrow or Friday and will share results. Do you know if ERA was actively running a task at the time of your upgrade? I believe mine was (whether or not that matters, I'm not sure), and that's really the only thing I'm going to do differently this time (besides waiting a day for it to complete).

Thanks @MartinK. The database was large (this was due to a configuration mistake in which there were 2 Agent tasks to report installed applications). It seems we did not wait long enough for the database to complete it's upgrade and we corrupted it. Fortunately, we were able to restore both the 6.4 ERA server and the DB (hosted separately) successfully. We will try upgrading again and have more patience this time (we now see not waiting long enough is a known issue )

Hello, We've upgraded ERA from 6.4.29.0 to 6.5.522.0 using the ERA Component Upgrade task. Everything went fine during the upgrade and seemed to go smoothly, however, after trying to log into the Web Console afterwards we received "Login failed: Connection has failed with state 'Not connected'" after providing our credentials. We gave it 30 minutes to connect to the database (which is hosted on SQL Server 2008 R2 instance on a different VM) and still received the error. We then tried restarting the ESET Remote Administrator Server service, but it just hung on "Stopping" indefinitely. We then rebooted the server and followed the instructions on this ESET KB article: hxxp://support.eset.com/kb5852/?viewlocale=en_US, which did nothing. The ESET Remote Administrator Server service will now start and stop 3 seconds later. Upon viewing the trace.log (found at C:\ProgramData\ESET\RemoteAdministrator\Server\EraServerApplicationData\Logs), we noticed the last entries are the following: 2017-03-14 21:27:04 Information: Kernel [Thread 6e4]: Used memory before modules load and initialization is 28548 KB 2017-03-14 21:27:04 Information: Kernel [Thread 6e4]: Initializing module CTranslatorModule 2017-03-14 21:27:04 Information: CTranslatorModule [Thread 6e4]: Registering translator resource 2017-03-14 21:27:04 Information: CTranslatorModule [Thread 6e4]: Module successfully initialized 2017-03-14 21:27:04 Information: Kernel [Thread 6e4]: Initialized module CTranslatorModule (used 8 KB) 2017-03-14 21:27:04 Information: Kernel [Thread 6e4]: Initializing module CUpdatesModule 2017-03-14 21:27:04 Information: Kernel [Thread 6e4]: Initialized module CUpdatesModule (used 48 KB) 2017-03-14 21:27:04 Information: Kernel [Thread 6e4]: Initializing module CDatabaseModule 2017-03-14 21:27:05 Information: CDatabaseModule [Thread 6e4]: Startup configuration builder builds successfully ... 2017-03-14 21:27:06 Information: CDatabaseModule [Thread 6e4]: Startup connection pool created ... 2017-03-14 21:27:06 Information: CDatabaseModule [Thread 6e4]: Builder rebuilds successfully ... 2017-03-14 21:27:06 Information: CDatabaseModule [Thread 6e4]: Connection pool recreated ... 2017-03-14 21:27:06 Information: CDatabaseModule [Thread 6e4]: CDBSetupperBase::PerformUpgradeIfNecessary: Checking if ETL DB is required 2017-03-14 21:27:06 Information: CDatabaseModule [Thread 6e4]: CDBSetupperBase::PerformUpgradeIfNecessary: ETL upgrade required. 2017-03-14 21:27:07 Information: CDatabaseModule [Thread 6e4]: CDBSetupperBase::PerformUpgradeIfNecessary: Going to back up old logs. 2017-03-14 21:58:03 Information: Kernel [Thread f80]: Unloading module: CUpdatesModule 2017-03-14 21:58:03 Information: Kernel [Thread f80]: Unloading module: CTranslatorModule 2017-03-14 21:58:03 Error: Service [Thread f80]: [Microsoft][ODBC SQL Server Driver][SQL Server]Invalid object name 'tbl_log_apps_installed_status'. Does this mean the database is corrupt or didn't finish updating??? Not sure what went wrong with the upgrade... Would really like to avoid a database restore!

I wonder if choosing an IP address will be available in ERA 6.5? Any beta testers know?

Following up to post install of hotfix. It's been 3 weeks (21 days) and have not experienced hanging issue. We plan on rebooting server tonight for unrelated reasons for the first time since hotfix was applied.

Installed hotfix from Microsoft as mentioned by @pesphil in post #12 over the weekend. Though it's only been a couple of days, so far so good. I will follow up 2 or 3 times over the next few weeks and post status. Hopefully this resolves the issue. @czechoto, are you having the same issue on Server 2012 R2? Please keep up posted, thanks!

Thanks, going to install over the weekend.

We too are experiencing random hangs (every few days to couple weeks) on Server 2008R2 server using version 6.0.120.25. No event logs, no memory dumps generated, and no ESET logs provide any kind of clue. Does anyone have any updates/fixes yet? I'm debating if I should even upgrade to 6.0.12035 as it seems this version has the same issue. @czechoto, any feedback from Polish support team? @tomha, any crashes after disabling Protocol Filtering yet? I may give this a try as it seems to be the only suggestion other than completely uninstalling.

My situation is almost the same as yours and I found a way to make the LiveAgent silent and download from your own source. Silent install of Agent Open the batch file created by the Live Agent Installer. Do a search for /qr and and change it to /qn. This will make the MSI install in quiet mode with no GUI. Redirect source of Agent Secondly, within the same batch file, find the links that point to the online ESET repository. Simply change the URLs to your UNC paths.

Found the answer. It's actually a policy that you must assign to a group / client. Found under ADMIN -> POLICIES -> REMOTE ADMINISTRATOR AGENT - APPLICATION REPORTING

Not familiar with LDAP for Centos. Could you just enter the group's SID manually?

When/how does the agent for version 6 products detect non-ESET installed applications (for reporting in Remote Administrator)? Does the agent only list ESET products and other applications it (the agent) previously pushed? Or can it detect install applications it had nothing to do with? Is there perhaps a SysInspector script that can be ran and somehow display a report in Remote Administrator?

When you click the SELECT box next to GROUP SID [found under ADMIN-->ACCESS RIGHTS-->MAPPED DOMAIN SECURITY GROUPS-->NEW], do you not get a list of all the groups in your domain?

Is it possible to install AVRemover_eea_nt64_enu.exe (AV Remover for Endpoint Antivirus 6) silently? I tried calling the executable from the command line with a bunch of previous used switches but had no success.