Work queue paused and CASE update fails

[ashaw216]

  We have a C160 appliance that whose Work Queue is growing. The Status shows

System Status:  Paused on services: antispam

How can I unpause this?  Also, when I grep the Updater logs, I see this which says at the end that the case update failed:

Tue May 28 12:19:33 2013 Info: Starting scheduled update

Tue May 28 12:19:33 2013 Info: Scheduled next update to occur at Tue May 28 12:24:33 2013

Tue May 28 12:19:41 2013 Info: case started downloading files

Tue May 28 12:19:41 2013 Info: case waiting on download lock

Tue May 28 12:19:41 2013 Info: case acquired download lock

Tue May 28 12:19:41 2013 Info: case beginning download of remote file "http://updates.ironport.com/case/1.0/case_rules/default/1369750263859399"

Tue May 28 12:19:42 2013 Info: case released download lock

Tue May 28 12:19:42 2013 Info: case successfully downloaded file "case/1.0/case_rules/default/1369750263859399"

Tue May 28 12:19:42 2013 Info: case waiting on download lock

Tue May 28 12:19:42 2013 Info: case acquired download lock

Tue May 28 12:19:42 2013 Info: case beginning download of remote file "http://updates.ironport.com/case/1.0/dfa_updates/default/1369757302745197"

Tue May 28 12:19:42 2013 Info: case released download lock

Tue May 28 12:19:42 2013 Info: case successfully downloaded file "case/1.0/dfa_updates/default/1369757302745197"

Tue May 28 12:19:42 2013 Info: case waiting on download lock

Tue May 28 12:19:42 2013 Info: case acquired download lock

Tue May 28 12:19:42 2013 Info: case beginning download of remote file "http://updates.ironport.com/case/1.0/toc_rules/default/1369755790836242"

Tue May 28 12:19:42 2013 Info: case released download lock

Tue May 28 12:19:42 2013 Info: case successfully downloaded file "case/1.0/toc_rules/default/1369755790836242"

Tue May 28 12:19:42 2013 Info: case waiting on download lock

Tue May 28 12:19:42 2013 Info: case acquired download lock

Tue May 28 12:19:42 2013 Info: case beginning download of remote file "http://updates.ironport.com/case/1.0/pkg_version/default/1369757350776856"

Tue May 28 12:19:42 2013 Info: case released download lock

Tue May 28 12:19:42 2013 Info: case successfully downloaded file "case/1.0/pkg_version/default/1369757350776856"

Tue May 28 12:19:42 2013 Info: case waiting on download lock

Tue May 28 12:19:42 2013 Info: case acquired download lock

Tue May 28 12:19:42 2013 Info: case beginning download of remote file "http://updates.ironport.com/case/1.0/uridb_updates/default/1369756889979770"

Tue May 28 12:19:43 2013 Info: case released download lock

Tue May 28 12:19:43 2013 Info: case successfully downloaded file "case/1.0/uridb_updates/default/1369756889979770"

Tue May 28 12:19:43 2013 Info: case waiting on download lock

Tue May 28 12:19:43 2013 Info: case acquired download lock

Tue May 28 12:19:43 2013 Info: case beginning download of remote file "http://updates.ironport.com/case/1.0/dfa/default/1369757354605748"

Tue May 28 12:19:43 2013 Info: case released download lock

Tue May 28 12:19:43 2013 Info: case successfully downloaded file "case/1.0/dfa/default/1369757354605748"

Tue May 28 12:19:43 2013 Info: case started applying files

Tue May 28 12:19:45 2013 Warning: case update failed

[Stephan Bayer · Accepted solution]

Have you hard booted your box lately?

I would also recommend the following CLI command to force update your antispam definitions and engine:

CLI> antispamupdate force

if prompted, select "Ironport"

[ashaw216]

   One of the other threads I found on this said that hard booting the appliance could cause corruption of the work queue, is that an issue?

  I had to modify the command to

CLI> antispamupdate ironport force

  to get it to work, but that looks like that did the trick for the case update at least.

EDIT:   That looks like it fixed the paued work queue as well and the queue is going down.  Thanks!

[Stephan Bayer]

Glad to hear. Thank you for rating the thread as answered. Have a great day.

[Guillaume BARBEROT]

Hello

the commands given

antispamupdate ironport force

antivirusupdate force

have done the job for us also

we had to wait 3 minutes for all antispam components to update

After that the workqueue command gave the status operational on a C170 appliance

thanks