Jump to content

EEI | Can't connect to EEI-Server


avielc

Recommended Posts

Hi
I had some issue where computers suddenly stopped sending logs to the clients, after a while I figured it was related to the upgrade of client's version to the latest(1764), while the server was on previous version(1755)
so now there are still a few machines (mostly Windows ) 
That receive this error in the log: 

2022-02-01 18:03:14 017e8 Info: Events Statistics, From:, 2022-02-01 17:58:35, To:, 2022-02-01 18:03:09, Duration (s):, 274, Events Per Second:, 2.883, Events:, 790, File:, 256, Registry:, 189, TcpIp:, 40, Http:, 10, Dns:, 9, Process:, 74, Injections:, 0, Dll:, 15, Traffic:, 22, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 12, Wmi:, 161, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 1, TrafficSize:, 2826981, TrafficInterval:, 34560, Executions:, 0, Subprocesses:, 0, Connections:, 14, Batch Size (bytes):, 57183
2022-02-01 18:03:51 017dc Error: Error while sending request to server at "eei-server.hq.leadspace.com:2226". The I/O operation has been aborted because of either a thread exit or an application request
2022-02-01 18:08:14 017e8 Info: Events Statistics, From:, 2022-02-01 18:03:35, To:, 2022-02-01 18:07:58, Duration (s):, 263, Events Per Second:, 1.373, Events:, 361, File:, 170, Registry:, 21, TcpIp:, 3, Http:, 1, Dns:, 5, Process:, 31, Injections:, 0, Dll:, 13, Traffic:, 14, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 101, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 1, TrafficSize:, 17721336, TrafficInterval:, 5060, Executions:, 0, Subprocesses:, 0, Connections:, 1, Batch Size (bytes):, 26194
2022-02-01 18:13:14 017e8 Info: Events Statistics, From:, 2022-02-01 18:08:27, To:, 2022-02-01 18:13:07, Duration (s):, 280, Events Per Second:, 1.357, Events:, 380, File:, 235, Registry:, 4, TcpIp:, 6, Http:, 2, Dns:, 17, Process:, 42, Injections:, 0, Dll:, 11, Traffic:, 15, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 1, Wmi:, 44, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 2, TrafficSize:, 45493561, TrafficInterval:, 6183, Executions:, 0, Subprocesses:, 0, Connections:, 2, Batch Size (bytes):, 31250
2022-02-01 18:18:14 017e8 Info: Events Statistics, From:, 2022-02-01 18:13:29, To:, 2022-02-01 18:18:08, Duration (s):, 279, Events Per Second:, 3.376, Events:, 942, File:, 473, Registry:, 148, TcpIp:, 17, Http:, 7, Dns:, 19, Process:, 74, Injections:, 0, Dll:, 16, Traffic:, 21, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 3, Wmi:, 162, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 1, TrafficSize:, 28512885, TrafficInterval:, 14336, Executions:, 0, Subprocesses:, 0, Connections:, 5, Batch Size (bytes):, 74584
2022-02-01 18:23:14 017e8 Info: Events Statistics, From:, 2022-02-01 18:18:15, To:, 2022-02-01 18:23:04, Duration (s):, 289, Events Per Second:, 0.879, Events:, 254, File:, 100, Registry:, 44, TcpIp:, 7, Http:, 2, Dns:, 0, Process:, 29, Injections:, 0, Dll:, 10, Traffic:, 17, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 43, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 1, TrafficSize:, 22352178, TrafficInterval:, 5428, Executions:, 0, Subprocesses:, 0, Connections:, 2, Batch Size (bytes):, 26400
2022-02-01 18:28:14 017e8 Info: Events Statistics, From:, 2022-02-01 18:24:07, To:, 2022-02-01 18:28:04, Duration (s):, 237, Events Per Second:, 1.139, Events:, 270, File:, 98, Registry:, 38, TcpIp:, 3, Http:, 1, Dns:, 2, Process:, 39, Injections:, 0, Dll:, 12, Traffic:, 6, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 2, Wmi:, 66, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 2, TrafficSize:, 11554257, TrafficInterval:, 1286, Executions:, 0, Subprocesses:, 0, Connections:, 1, Batch Size (bytes):, 20083
2022-02-01 18:30:26 08334 Error: Error while sending control request to server at "eei-server.hq.leadspace.com:2226". The I/O operation has been aborted because of either a thread exit or an application request
2022-02-01 18:31:19 08334 Error: Error while sending control request to server at "eei-server.hq.leadspace.com:2226". The I/O operation has been aborted because of either a thread exit or an application request
2022-02-01 18:32:55 08334 Error: Error while sending control request to server at "eei-server.hq.leadspace.com:2226". The I/O operation has been aborted because of either a thread exit or an application request
2022-02-01 18:33:14 017e8 Info: Events Statistics, From:, 2022-02-01 18:28:58, To:, 2022-02-01 18:33:06, Duration (s):, 248, Events Per Second:, 0.694, Events:, 172, File:, 73, Registry:, 8, TcpIp:, 2, Http:, 0, Dns:, 1, Process:, 29, Injections:, 0, Dll:, 10, Traffic:, 12, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 35, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 1, TrafficSize:, 42433319, TrafficInterval:, 4211, Executions:, 0, Subprocesses:, 0, Connections:, 1, Batch Size (bytes):, 15951
2022-02-01 18:33:40 017dc Error: Error while sending request to server at "eei-server.hq.leadspace.com:2226". The I/O operation has been aborted because of either a thread exit or an application request
2022-02-01 18:38:14 017e8 Info: Events Statistics, From:, 2022-02-01 18:33:26, To:, 2022-02-01 18:38:14, Duration (s):, 288, Events Per Second:, 0.774, Events:, 223, File:, 99, Registry:, 13, TcpIp:, 0, Http:, 0, Dns:, 5, Process:, 33, Injections:, 0, Dll:, 11, Traffic:, 14, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 3, Wmi:, 43, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 1, TrafficSize:, 26354185, TrafficInterval:, 5530, Executions:, 0, Subprocesses:, 0, Connections:, 0, Batch Size (bytes):, 19049
2022-02-01 18:43:05 08334 Error: Error while sending control request to server at "eei-server.hq.leadspace.com:2226". The I/O operation has been aborted because of either a thread exit or an application request
2022-02-01 18:43:14 017e8 Info: Events Statistics, From:, 2022-02-01 18:38:21, To:, 2022-02-01 18:43:09, Duration (s):, 288, Events Per Second:, 0.618, Events:, 178, File:, 70, Registry:, 4, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 29, Injections:, 0, Dll:, 10, Traffic:, 16, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 1, Wmi:, 46, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 1, TrafficSize:, 32800150, TrafficInterval:, 7999, Executions:, 0, Subprocesses:, 0, Connections:, 0, Batch Size (bytes):, 15840

 

Any ideas how can I fix this? 

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...