Alerts about key

[Guillermo Hurtado]

Hi Team.

We have received some alerts like these in the ESA, let me know if it not have impact in the ESA´s performance and if we can ingore this kind of alerts:

An application fault occurred: ('egg/dict_utils.py handle_duplicate|35', "<type 'exceptions.ValueError'>", "Key 'case' is already registered.", '[_coro.pyx coro._coro._wrap1 (coro/_coro.c:8477)|757] [heimdall/child.py _logger|681] [heimdall/child.py _add_log_subscription|541] [qlog/config_glue.py add_internal_subscription|366] [egg/dict_utils.py handle_duplicate|35]')

An application fault occurred: ('egg/dict_utils.py handle_duplicate|35', "<type 'exceptions.ValueError'>", "Key 'splunkd' is already registered.", '[_coro.pyx coro._coro._wrap1 (coro/_coro.c:8477)|757] [heimdall/child.py _logger|681] [heimdall/child.py _add_log_subscription|541] [qlog/config_glue.py add_internal_subscription|366] [egg/dict_utils.py handle_duplicate|35]')

Best Regards

[Robert Sherwin]

These application faults appear to be from WSA, can you confirm?

There are two defects that these are matching up with:

https://tools.cisco.com/bugsearch/bug/CSCus10922

https://tools.cisco.com/bugsearch/bug/CSCur39155

What version are you running, if this is WSA?

Recommendation for correction relating to these is to upgrade to 8.5.2 or later:

http://www.cisco.com/c/en/us/support/security/web-security-appliance/products-release-notes-list.html

-Robert

[Guillermo Hurtado]

Hi Robert.

Is an ESA with version 7.6.3-019.

Thanks in advance.

Regards

[Robert Sherwin]

These do not appear to be performance impacting.

However, for any appliances running 7.6.3-019, that build is EoL and not supported.  Recommendation would be to upgrade to at least 8.5.6/8.5.7 (or newer).  If the application fault persists post-upgrade, please let us know via support case, or re-post to forums.

-Robert

[Guillermo Hurtado]

Robert, thank you for your answer.

Only let me know if this kind of alerts have any impact in the ESA performance.

Best Regards