Event Service queues spike to red immediately and no events are received. You check the Event Summarizers and you see "ERROR: Summarizers could not be retrieved."
You are able to log into the SSIM Java client
The following errors may also be seen in the eventservice.log file:
"WARN com.symantec.sim.eventservice.Router - Unable to send events: Not connected"
"Caused by: com.ibm.db2.jcc.a.SqlException: Connection authorization failure occurred. Reason: User ID or password invalid."
And/or the following error may also be seen in the db2diag.log file:
"Password validation for user symcmgmt failed with rc = -2146500507"
Also when logging in to the Symantec Security Information Manager (SSIM) you might see the following errors:
"Error occurred while communicating with the data store. This may be due to high load on the database."
The password for the symcmgmt user in SSIM does not match the Linux user symcmgmt password.
Review how to change passwords for all SSIM user account in the "Users and passwords" section of the Symantec Security Information Manager 4.x Administrator Guide
Imported Document ID: TECH176640
Subscribing will provide email updates when this Article is updated. Login is required.