C100v alert: Unable to connect to the Cisco Aggregator Server.

[keithsauer507]

Our CIO has been getting these messges.  I probobly have too but I have email rules to move the junk.

The Warning message is:

Unable to connect to the Cisco Aggregator Server.

Details: Invalid response received.

Version: 11.0.0-264

Serial Number: *removed for privacy*

Timestamp: 13 Nov 2017 13:51:25 -0500

Is this transient or known issues, or should I open a case with TAC?  Email is flowing inbound and outbound without any issues.

[Libin Varghese]

Hi,

This is due to a known issue that we are facing with the aggregator servers.

What will cause this issue is an ESA will be unable to connect to the aggregator due to any number of reason (for example, the firewall blocking the connection). As soon as this connection is restored, the ESA will request all the data that it missed while it was unable to connect. This can be months of data.

When this ESA queries for the data, this can overflow the aggregator server for a period of time. In this period, if another ESA queries the aggregator server, the aggregator server may not respond in time causing the alert you are seeing.

Thankfully. This issue doesn't affect mail flow of the ESA. The following is a link to a defect that was opened to require the ESA's to only query for 30 minutes of data at a time:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg39701/

Regards,

Libin Varghese

[Justin Schwilling]

Is there a way to disable just this alert? It can be quite talkative

[Nick Oleson]

My guess would be to update to the latest ASync release.  At least that's what I understood from the bug report.  We will be doing that during our next maintenance window so I get to live with it a little longer :/

[leonora-milisa]

Nope

[keithsauer507]

Our C100V is at 11.0.1-027.  It's not showing any available updates at the moment.  We updated earlier this week actually.

Whats ironic is that the device that is supposed to stop us from getting spammed, is actually spamming us these stupid alerts!

We went into System Administration > Alerts > our IT group email and unchecked everything in the "Warning" column except for Hardware.

I really don't need to know all the little details of this thing, as it quickly becomes the boy who cried wolf.  You'll start filing these emails away or shrugging them off and then you will miss a real important alert.  We just kept the "Critical" column checked.  I really don't want to know about anything unless its critical!