SFDataCorrelator, CloudAgent errors in the syslog

Herald Sison — Tue, 17 Oct 2023 13:08:42 GMT

Hi All,

Anyone experienced with a very intermittent to a random sites especially cisco sites and sometimes some web aps dont work and when we try to ping and tracert to the internet everything is fine and we even tried to remove the firewall and connect the network directly to the internet everything is fine. I have even removed all the url blocking in the ACP and only remained the allow all rule but still the problem persist, sometimes it went fine and sometimes its not but when i checked in the syslog i saw a lot of errors keeps on coming out.

when we reboot the FTD box everything will be fine again then after 2 days or so the problem will come back again.

would this errors below can cause traffic issues?

Please see errors below:

Oct 17 2023 20:28:14 ASA5508X-FMC SF-IMS[31851]: [18956] SFDataCorrelator:RNA_DB_Get [ERROR]Error 8 executing service query: Unhandled database error

Oct 17 2023 20:28:14 ASA5508X-FMC SF-IMS[31851]: [18956] SFDataCorrelator:MySQLUtil [ERROR] Failed query: SELECT ioc_id,disabled,first_seen,first_event_id,first_sensor_id,first_instance_id,first_connection_sec,first_counter,last_seen,last_event_id,last_sensor_id,last_instance_id,last_connection_sec,last_counter FROM user_ioc_state WHERE user_id=2074

Oct 17 2023 21:04:14 ASA5508X-FMC SF-IMS[31851]: [22730] SFDataCorrelator:MySQLUtil [ERROR] GetTableValues_Offset: MySQL error 1146: Table 'cfgdb.user_ioc_state' doesn't exist

Oct 17 2023 20:28:14 ASA5508X-FMC SF-IMS[31851]: [18956] SFDataCorrelator:MySQLUtil [ERROR] GetTableValues_Offset: MySQL error 1146: Table 'cfgdb.user_ioc_state' doesn't exist

Oct 17 2023 20:25:39 ASA5508X-FMC SF-IMS[31851]: [17216] SFDataCorrelator:AdiHandler [ERROR] Could not find the database to disconnect.

Oct 17 2023 20:44:31 ASA5508X-FMC SF-IMS[21801]: [21851] CloudAgent:CloudAgent_tunnel_service [ERROR] Handshake failed, failed to connect to peer 2333860c-5ce7-11ea-8249-cc0e5966b69c, Not connected
Oct 17 2023 20:44:31 ASA5508X-FMC SF-IMS[21801]: [21851] CloudAgent:DM_peercomms [WARN] Peer failed to respond after 180 seconds, connection will be reset

i do not know already what is really the problem, can someone help me please? We are using FMC 7.3.0 and FTD 7.0.5 ASA5508X.

Re: SFDataCorrelator, CloudAgent errors in the syslog

Herald Sison — Tue, 17 Oct 2023 18:18:07 GMT

I don't know if this is a bug or if my FTD version do have this bug or not but i read about something about platform settings that needed to be recreated and redeployed. Anyone can help? I really badly need this fix. Thank you so much in advance.

https://www.lammle.com/post/cisco-ftd-device-platform-settings-issues/

Re: SFDataCorrelator, CloudAgent errors in the syslog

Herald Sison — Wed, 18 Oct 2023 00:51:22 GMT

update: i have removed and redeployed a new platform settings but still the problem persist.

topic Re: SFDataCorrelator, CloudAgent errors in the syslog in Network Security

SFDataCorrelator, CloudAgent errors in the syslog

Re: SFDataCorrelator, CloudAgent errors in the syslog

Re: SFDataCorrelator, CloudAgent errors in the syslog