Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 17 replies
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 30852 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Patch assessment not bringing any results back

Mark Byrne

Hi

I've inherited a Sophos Enterprise installation and have recently started to push out the patch assessment module from the console to some 30+ Windows servers.

Some have been restarted, all are now showing patch assessment is active, with the version number,

 

So I left everthing overnight ( the patch policy is set to 8 hours ) and when I run the patch assessment events viewer, there is nothing there. What should I check ?

 

I have set the Patch status to be All and get nothing there either. I can't believe all the servers have every patch installed as we are not running WSUS or any active patching routine.

 

thanks



This thread was automatically locked due to age.
  • 0 in reply to Mark Byrne

    Hello Mark,

    I see that OSPXSet.xml is missing (this is likely the cause for the missing folder and files). I don't know how it gets there, mine has a timestamp corresponding to the last download by the Sophos Patch Feed task.
    Just in case please check the PatchFeedProcessor.log in C:\ProgramData\Sophos\Patch\Logs\ - though I fear it won't be of much help, in that case you should contact Support directly.

    Christian

  • 0 in reply to QC

    Thanks for your help Christian,

    I've checked that log but the recent entries are all pretty boring :

     

    2017-08-19 17:54:02 | PID 16348 | TID 1 | Information | -----PROGRAM START-----
    2017-08-19 17:54:33 | PID 16348 | TID 1 | Information | -----PROGRAM END-----
    2017-08-20 17:54:02 | PID 6668 | TID 1 | Information | -----PROGRAM START-----
    2017-08-20 17:54:46 | PID 6668 | TID 1 | Information | -----PROGRAM END-----
    2017-08-21 17:54:02 | PID 15924 | TID 1 | Information | -----PROGRAM START-----
    2017-08-21 17:58:18 | PID 15924 | TID 1 | Information | -----PROGRAM END-----
    2017-08-22 17:54:02 | PID 5212 | TID 1 | Information | -----PROGRAM START-----
    2017-08-22 17:54:59 | PID 5212 | TID 1 | Information | -----PROGRAM END-----
    2017-08-23 17:54:01 | PID 16608 | TID 1 | Information | -----PROGRAM START-----
    2017-08-23 17:54:45 | PID 16608 | TID 1 | Information | -----PROGRAM END-----

     

    earlier entries have errors in them but these are all from before I was even thinking about using the patch assessment tool.

     

    2017-08-10 11:59:14 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 11:59:14 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:02:15 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:02:15 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:05:15 | PID 14744 | TID 1 | Warning | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:05:15 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:05:15 | PID 14744 | TID 1 | Warning | Failure encountered while inserting or updating patch APSB17-23 Adobe Flash Player 26.0.0.151 for Windows (See Notes) : Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.
    2017-08-10 12:08:30 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:08:30 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:11:31 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:11:31 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:14:32 | PID 14744 | TID 1 | Warning | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:14:32 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:14:32 | PID 14744 | TID 1 | Warning | Failure encountered while inserting or updating patch 2017-08 Security Update for Adobe Flash Player for Windows 8.1 for x86 -based Systems (KB4034662) : Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.
    2017-08-10 12:18:28 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:18:28 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:21:28 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:21:28 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:24:29 | PID 14744 | TID 1 | Warning | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:24:29 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:24:29 | PID 14744 | TID 1 | Warning | Failure encountered while inserting or updating patch 2017-08 Security Update for Adobe Flash Player for Windows Server 2012 x64 (KB4034662) : Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.
    2017-08-10 12:32:26 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:32:26 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:35:26 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:35:26 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:38:27 | PID 14744 | TID 1 | Warning | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:38:27 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:38:27 | PID 14744 | TID 1 | Warning | Failure encountered while inserting or updating patch 2017-08 Security Update for Adobe Flash Player for Windows 8.1 x64 (KB4034662) : Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.
    2017-08-10 12:42:09 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:42:09 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:45:10 | PID 14744 | TID 1 | Information | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Execution will be retried. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:45:10 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:48:11 | PID 14744 | TID 1 | Warning | An SQL exception has been caught while executing 'usp_pf_insupdPatch'. Location = 'Execute command', SQL Error Code = '-2146232060', Message = 'Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.'
    2017-08-10 12:48:11 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:48:11 | PID 14744 | TID 1 | Warning | Failure encountered while inserting or updating patch 2017-08 Security Update for Adobe Flash Player for Windows Server 2012 R2 x64 (KB4034662) : Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.

     

    I've raised a ticket with support and hopefully will get an answer to this.
    Is there anything in the missing OPSXSet.xml that is installation specific ? Wondering if copying the .xml file in there would fix this issue ?

     

    Cheers

    Mark

  • 0 in reply to Mark Byrne

    Hello Mark,

    OPSXSet.xml
    you have one somewhere? It's not specific but the Patch Server should download it (from Lumension) and if it doesn't there's an issue that should be resolved. But it might be a temporary workaround.

    Christian

  • 0 in reply to QC

    I don't have a SEC handy but based on these messages:

    2017-08-10 12:48:11 | PID 14744 | TID 1 | Information | Error(Number='-2',Message='Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.',Source='.Net SqlClient Data Provider',State='0')
    2017-08-10 12:48:11 | PID 14744 | TID 1 | Warning | Failure encountered while inserting or updating patch 2017-08 Security Update for Adobe Flash Player for Windows Server 2012 R2 x64 (KB4034662) : Execution Timeout Expired. The timeout period elapsed prior to completion of the operation or the server is not responding.

    I'm sure there is a command timeout registry key that could be increased for the Patch component.

    From memory I assume it would be under either
    HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Patch
    or
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\EE\Patch

    There is usually a connection timeout and a command timeout value that can be changed.  In this case you would want to influence the command timeout.

    If you can adjust it to say 2 minutes / 180 seconds or whatever the units are and then restart the Sophos Patch services, does this error go away?  

    Regards,
    Jak

  • 0 in reply to QC

    Hi Christian,

    No, I can't find "OPSXSet.xml" anywhere on either my own machine or the server. Waiting to hear from support now.

    Thanks

  • 0 in reply to jak

    Thanks Jak, the SophosPatchCommandTimeout is already set at 180 

    From the conversation with Christian, I think we are missing some files from the server.

     

    Mark

  • 0 in reply to Mark Byrne

    Sophos resolved this issue with a custom SQL script ran against the SophosPatch52 DB - so not an easy fix but many thanks to everyone that helped. 
    We backed up the database then ran the script, which seems to reset the database, upgrade the status map and then delete criteria, agent platform information and OS version. It then inserted this information back into the database again.

Unfiltered HTML