ISE Alarm: Warning: Profiler Queue Size Limit Reached

Anyone know what this error means and more importantly, is it anything to really be concerned about? We started receiving this today for one of our PSNs and have been getting the alert every five minutes. There hasn't been any 'known' impacts from this but it's very annoying and the Cisco documentation is a little vague.
Thank you....

Hmm, I am sorry but I will have to ask more questions:
1. You mentioned that your PSNs are behind a load balancer, but are the nodes in a "node group?" If they are not you should place them in a node group. If they are you will need to split them as the max recommended nodes per node group is 10.
2. If the nodes are indeed in a node group are they all L2 adjacent?
3. If your deployment consists of VMs and not physical appliances, can you confirm that both the adequate CPU/RAM are allocated and reserved for the VMs?
Here are also some recommendations:
1. If possible, move to IOS sensor on all of your switches and disable the probes that will no longer be needed.
2. If #1 is not possible check the configurations on your NADs and where Device Sensor is configured you should remove, IP Helper and SNMP Query based configs. This will prevent duplicate information from being sent to the PSNs
3. Look to completely eliminate SNMP Traps based configurations for ISE. That probe along with Netflow and the Span probes are pretty heavy hitters
4. Make sure that you are using Device Sensor on your WLCs as well
5. Use the latest patch
6. Get a support case going with Cisco and have them take a look :)
For more info you should take a look at the following Cisco Live Sessions:
BRKSEC-3697 and BRKSEC-3699
Thank you for rating helpful posts!

Similar Messages

ISE Alarm (WARNING): Dynamic Authorization Failed for Device

Hi all,
I am posting this discussion as previous posts that I have found in this forum have never been resolved or the resolution is not applicable to me.
I am using ISE 1.1.1.268 and WLC 7.2.111.3 and NAC agent version 4.9.1.6 on Windows 7 Client machines.
About once a day i get the error "ISE Alarm (WARNING): Dynamic Authorization Failed for Device".
The device it is reffering to is my NAD, a WLC 5508 running 7.2.111.3
I have looked at the logs and I cannot see anything in the logs which correcponds to this message so that I can troubleshoot further. Maybe I can if I am enabling the correct logging level on the correct ISE component.
Can someone suggest the components and the logging level that I should set to get some more detail about this error?
At the moment, I have only set debug logging on Active Directory. I have TRACE logging set on Posture, Runtime AAA & prrt-JNI.
I do not want to enable too much debug logs, so I was wondering whether anyone can help with a specific element that I should be debugging.
I thought debugging the posture element would be enough but when I look at the logs there is nothing there that relates to this message.
Can anyone help?
thanks
Mario

Firstly, I wouldn't run a production deployment of ISE on 1.1.1.... 1.1.3 Patch 1 or 1.1.4 is the way to go.
Secondly, this error happen a lot, especially with Wireless, and it's not worth worrying about. I've had a couple of TAC cases opened for this and some similar errors, generally they're caused by a Client going to sleep, leaving the coverage area or otherwise leaving the WLC while ISE is trying to do something with it.
Only worry if you actually have a Client-impacting problem, which by the sounds of it, you don't.

Cant send a picture message, message size limit reached

My droid razor just recently started to not let me add pictures to messages. It says the pictures to large that it has to be resized, its always said that but then it would resize it and it would send. but now it is starting to say message size limit reached sorry, you cannot add this picture to your message i tryed to use old pictures in a message that ive previously been able to send and i get the same message. My pictures are set on widescreen 6MP right now and video resolution HD+ (1080p) i tryed changing these settings and it still doesnt work. i have pictures that are 1.2MP and they wont even send. it wont let me send a video or audio either only text. Please help!

zjoy622011-
I definitely want to help restore the devices capability of sending photos! Has the device gone through any recent updates? Is this just picture messaging, or also photo sharing like Facebook, Instagram, etc? If you are using any third party texting apps, I recommend trying the built-in messaging app instead. Also, what city & state are you located in? I want to ensure there are no issues related to the network involved here.
Keep me posted!
Thanks,
AdamE_VZW
Follow us on Twitter @VZWSupport

Maximum character output size limit reached

While importing data in Lumira using HANA based universes I am getting an error maximum character output size limit reached. Will appreciate any info on which server parameter controls this property. Attached the error message.

Hi everyone,
I believe Henry Banks discovered a solution for resolving this kind of error message. This is a limit which can be changed from within the "Web Intelligence Processing Server" from your CMC based on large amount of rows in your data. You can find his post about this here.
It's roughly about half way down the page and I hope it helps.
-Khuram

Error message "Maximum character output size limit reach Err_WIS_30272"

Users are getting the Error message "Maximum character output size limit reach Err_WIS_30272" while creating the Universe Query in the Live Office, but when they create the same query in the Web intelligence Report then it work fine.
To resolve this error message we can have to increase the value of "Maximum Character Stream Size" parameter in the Web intelligence Processing Server.
But i want to know the reason why the error message is only appearing in the Live Office Query, where it work fine in Web intelligence Query.
Are there architectural difference in Web intelligence and Live Office?

Hi,
maybe one of the following SAP Notes will answer your Question.
https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/sno/ui_entry/entry.htm?param=69765F6D6F64653D3030312669765F7361706E6F7465735F6E756D6265723D3133373030343526
https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/sno/ui_entry/entry.htm?param=69765F6D6F64653D3030312669765F7361706E6F7465735F6E756D6265723D3133373537353526
https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/sno/ui_entry/entry.htm?param=69765F6D6F64653D3030312669765F7361706E6F7465735F6E756D6265723D3133383336363426
Regards
-Seb.

Logfile size limit reached - logging stopped

From time to time, quite often, a pop-up window appears on my screen and says:Logfile size limit reached - logging stopped. I only can push "Accept" button or close it, but it rises again some time later. I haven't found any information on the web.

Hello,
I had this problem too, but I found the cause of it. It's comes from the extension 'IPLogger 1.6'.
This extension store, for every connexion, your IP adresse in a logfile, so after some times the file is full and the message "Logfile size limit reached" is displayed.
The best solution is to completely remove this extension, and replace it by similar one, like 'External IP'.
Now, the problem is solved for me :)
p.s. This problem should be considered as a bug for extension IPLogger. The logfile should be cleared when full instead of diplaying this annoyinf message !

ISE Alarm : Critical : Profiler SNMP Request Failure : Server

Ok, so this alarm is coming in repeatedly and is now on my projects list. I get email alerts from the server that list thr NAD IP as the endpoint device and the Endpoint IP address is correct. I've checked the settings and the endpoint is not listed as a NAD in ISE (ver 1.2).
Profiler SNMP Request Failure
Details :
Profiler SNMP Request Failure : Server=xxx-xxx-xxx; NAD Address=10.253.124.194; Endpoint IP Address=10.253.124.194
Description :
SNMP request times out, or SNMP community/user auth data is incorrect.
Suggested Actions :
Please ensure if SNMP is running on the NAD and verify that SNMP configuration on ISE matches on NAD
*** This message is generated by Cisco Identity Services Engine (ISE) ***
Has anyone seen this come in before?
PS - Why is the IOS for ISE so cut down? Looks like something you would get from an Apple product.
Thanks,
Clark

Hello,
Please follow below CiscoLink:
http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_mnt.html
Profiler SNMP Request Failure
Either the SNMP request timed out or the SNMP community or user authentication data is incorrect.
Ensure that SNMP is running on the NAD and verify that SNMP configuration on Cisco ISE matches with NAD.
Also ensure what snmp version device is using.
Thanks,

ISE Alarm : Warning : Session directory write failed : [TimesTen][TimesTen 11.2.2.2.0 ODBC Driver][TimesTen]TT0846: Data store connection invalid or not current -- file "dbAPI.c"; lineno 7475; procedure "sb_connLatchAcquire"

I got this message about 20 times:
Log Collection Error
Details :
Session directory write failed : [TimesTen][TimesTen 11.2.2.2.0 ODBC Driver][TimesTen]TT0846: Data store connection invalid or not current -- file "dbAPI.c"; lineno 7475; procedure "sb_connLatchAcquire"
Description :
The ISE M&T collector process is unable to persist the audit logs generated from the Policy Service nodes
Suggested Actions :
This will not impact the actual functionality of the Policy Service nodes, Please contact TAC"
It started after I've added a third DNS Server and did not reboot the whole appliance, but just all services....
Does anyone know what really might triggered this? After rebooting ISE everything was ok again. But I couldn't find anything in ISE's logs
KR

I did a reboot and the problem was solved. I got the message when I tried to stop ISE while all services were just about to get up.
ISE Version: 1.2.0.899

S1000 Data file size limit is reached in statement

I am new to Java and was given the task to trouble shoot a java application that was written a few years ago and no longer supported. The java application creates database files the user's directory: diwdb.properties, diwdb.data, diwdb.lproperties, diwdb.script. The purpose of the application is to open a zip file and insert the files into a table in the database.
The values that are populated in the diwdb.properties file are as follows:
#HSQL Database Engine
#Wed Jan 30 08:55:05 GMT 2013
hsqldb.script_format=0
runtime.gc_interval=0
sql.enforce_strict_size=false
hsqldb.cache_size_scale=8
readonly=false
hsqldb.nio_data_file=true
hsqldb.cache_scale=14
version=1.8.0
hsqldb.default_table_type=memory
hsqldb.cache_file_scale=1
hsqldb.log_size=200
modified=yes
hsqldb.cache_version=1.7.0
hsqldb.original_version=1.8.0
hsqldb.compatible_version=1.8.0
Once the databsae file gets to 2GB it brings up the error meessage 'S1000 Data file size limit is reached in statement (Insert into <tablename>......
From searching on the itnernet it appeared that the parameter hsqldb.cache_file_scale needed to be increased & 8 was a suggested value.
I have the distribution files (.jar & .jnlp) that are used to run the application. And I have a source directory that was found that contains java files. But I do not see any properties files to set any parameters. I was able to load both directories into NetBeans but really don't know if the files can be rebuilt for distribution as I'm not clear on what I'm doing and NetBeans shows errors in some of the directories.
I have also tried to add parameters to the startup url: http://uknt117.uk.infores.com/DIW/DIW.jnlp?hsqldb.large_data=true?hsqldb.cache_file_scale=8 but that does not affect the application.
I have been struggling with this for quite some time. Would greatly appreciate any assistance to help resolve this.
Thanks!

Thanks! But where would I run the sql statement. When anyone launches the application it creates the database files in their user directory. How would I connect to the database after that to execute the statement?
I see the create table statements in the files I have pulled into NetBeans in both the source folder and the distribution folder. Could I add the statement there before the table is created in the jar file in the distribution folder and then re-compile it for distribution? OR would I need to add it to the file in source directory and recompile those to create a new distribution?
Thanks!

Office 2010 downloads too much stuff to users' roaming profiles, making it go over the 30MB size limit

Hey, we recently rolled out to Office 2010 at my workplace.
On the student segment we've activated the 30MB roaming profile size limit, and we've found that a bunch of students have had trouble with this now because Office 2010 seems to download around 8MB of files to %APPDATA%\Microsoft\Templates\LiveContent, which
occasionally makes the profile go over the 30MB size limit.
Is there any easy way to prevent this LiveContent from being downloaded?? Anything I can set in the installation transformation file, or preferably with a registry setting or something?

You had mentioned a policy to disable synchronization of the LiveContent folders.
I think it would be this GP admin template setting, it's what we use for this kind of requirement:
File Name: UserProfiles.admx
Policy Setting Name: Exclude directories in roaming profile
Scope: User
Policy Path: System\User Profiles
Registry Information: HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs
Supported On: At least Windows 2000
Help Text: This policy setting lets you exclude folders that are normally included in the user's profile.
As a result, these folders do not need to be stored by the network server on which the profile resides and do not follow users to other computers.
Note: When excluding content from the profile you should try to exclude the narrowest set of data that will address your needs.
For example, if there is one application with data that should not be roamed then add only that application's specific folder under the AppData\Roaming folder rather than all of the AppData\Roaming folder to the exclusion list.By default, the Appdata\Local
and Appdata\LocalLow folders and all their subfolders such as the History, Temp, and Temporary Internet Files folders are excluded from the user's roaming profile.In operating systems earlier than Microsoft Windows Vista, only the History, Local Settings,
Temp, and Temporary Internet Files folders are excluded from the user's roaming profile by default.If you enable this policy setting, you can exclude additional folders.If you disable this policy setting or do not configure it, only the default folders are
excluded.
Note: You cannot use this policy setting to include the default folders in a roaming user profile.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Temporary Queue BMQ size limit?

Hi,
is there a size limit for tha temporary queue on BEA Message queue?
To explain better the ones managed by BMQ itself, not the permanent ones configured in the init files.
I ask this since I have this kinf of transaction on my application:
client send a message by BMQ to Server that performs the receive and send the ACK Message to client whose buffer is 30 KB(30.000 byte), so is there a size limit on the BEA Message Q temporary queues?
Thanks.
Ciao
Andrea

That depends. In most cases, there is no limit for tmq queue size.
But you need to know the following things:
1. On Unix/Win, the tmp queue is stored in the heap of qe process and doesn't have size limit. But on OVMS, tmp queue shares the global section with other queues. So obviously the max tmp queue size is limited.
2. You can define the tmp queue quota in init file. In this case, the queue size is limited.
3. If the tmp queue quota is exceeded, the message will be stored in SAF/DQF files, which may have size limit.
4. If the message is sent cross groups, the message may be in link_buffer_pool when linkdriver is busy for network I/O. The link_buffer_pool is limited.
5. Each message cannot exceed the specified max message in this group, which is defined in init file and needs to be less than or equal to 4M bytes.
Regards,
Leo

HotSpot(TM)64-BitServer VM warning: (benign)Hit CMSMarkStack max size limit

Hi I am getting the CMSMarkStack max size limit. Could anyone explain why i am getting that.
61083.003: [GC 61083.003: [ParNew: 523392K->0K(523840K), 0.1802670 secs] 2866168K->2364464K(4193856K), 0.1804250 secs]
61087.107: [GC 61087.107: [ParNew: 523392K->0K(523840K), 0.1970010 secs] 2887856K->2396761K(4193856K), 0.1971990 secs]
61087.349: [GC [1 CMS-initial-mark: 2396761K(3670016K)] 2408426K(4193856K), 0.0330660 secs]
61087.382: [CMS-concurrent-mark-start]
61089.382: [CMS-concurrent-mark: 2.000/2.000 secs]
61089.382: [CMS-concurrent-preclean-start]
61089.637: [CMS-concurrent-preclean: 0.253/0.255 secs]
61089.637: [CMS-concurrent-abortable-preclean-start]
CMS: abort preclean due to time 61090.703: [CMS-concurrent-abortable-preclean: 0.224/1.067 secs]
61090.721: [GC[YG occupancy: 336074 K (523840 K)]61090.721: [Rescan (parallel) , 0.4475020 secs]61091.169: [weak refs processing, 1.8464740 secs]Java HotSpot(TM) 64-Bit Server VM warning: (benign) Hit CMSMarkStack max size limit
[1 CMS-remark: 2396761K(3670016K)] 2732836K(4193856K), 2.5285500 secs]
61095.521: [CMS-concurrent-sweep-start]
61104.793: [CMS-concurrent-sweep: 9.271/9.271 secs]
61104.793: [CMS-concurrent-reset-start]
61104.821: [CMS-concurrent-reset: 0.029/0.029 secs]
61110.338: [GC 61110.338: [ParNew: 523392K->0K(523840K), 0.6183310 secs] 2133391K->1628588K(4193856K), 0.6184950 secs]
61162.032: [GC 61162.032: [ParNew: 523392K->0K(523840K), 0.2259220 secs] 2151980K->1662904K(4193856K), 0.2261040 secs]
61171.154: [GC 61171.155: [ParNew: 523392K->0K(523840K), 0.1890640 secs] 2186296K->1686907K(4193856K), 0.1892200 secs]
regards
R.Sriram

"errno = 28" is an error code from the OS which means "No space left on device" this could indicate you don't have enough swap space.
I suspect you are using too much memory even when you don't think you are.
I would start with a simple "hello world" program and increase the memory until you get an error. If you can't run even a hello world program you have a serious system error.

ISE-5443 RADIUS request dropped due to reaching EAP sessions limit

Hi Guys,
I am getting the below error message from two PSNs (out of 4) & resulting 95% failed authentications on ISE
"5443 RADIUS request dropped due to reaching EAP sessions limit"
Could not find any documents/reference & trying to get on hold TAC in the mean time.
If anyone of you know what could it be, pls share your inputs
TIA
Rasika

Hi Scott,
Thanks for that..
here is bit more information about this evnts log in ISE system (1.2 Patch 4).
Event: 5405 RADIUS Request dropped
Failure Reason :5443 RADIUS request dropped due to reaching EAP sessions limit
Resolution : Wait a few seconds before invoking another RADIUS request with new EAP session. If system overload continues to occur, try restarting the ISE Server
Root cause: A RADIUS request was dropped due to reaching EAP sessions limit. This condition can be caused by too many parallel EAP authentication requests.
Worked with TAC & restarted the service of one PSN node & that brings that node to normal condition & removed the other PSN form the F5 pool until TAC analyze gathered support bundle from that.
It is not heavily loaded environment (3k wireless clients) at the moment & bit scary since we are expecting around 15k when students are back in early March. Authentication failure rate is around 100 in every 15-20s interval. Not sure what is the limitation of the ISE system itself to handle number of EAP sessions per second.
Rasika

Size limit for flar file with Sol 10 WANBOOT

There seems to be some kind of a size limit for flash archive files used by wanboot. When I try to wanboot jumpstart, I get the following:
Processing profile
- Opening Flash archive
ERROR: HTTP server returned an invalid archive file size: <-1256985017> bytes
ERROR: Invalid HTTP headers were returned from the server
ERROR: Flash installation failed
Solaris installation program exited.
The flash archive is about 3GB. I'm doing the WANBOOT using the "boot cdrom" work-around, because the V100 I'm jumpstarting doesn't support the newer OBP parameters.
If create a new smaller flash archive like so:
mv sol10.flar sol10.flar.old
dd if=sol10.flar.old of=sol10.flar bs=1024K count=1024
cutting the flar down to 1GB. Then I do the wanboot. I don't get the error, and the jumpstart proceeds. Of course it would eventually have a problem when the cpio file reached premature end.
So is there a prescribed limit to flars with WANBOOT. I'm assuming it's 2GB, but if so, why?
No I haven't tried creating a compressed flar: that's next.
Thanks,
Chip Bennett
Laurus Technologies, Inc.
Itasca, IL

nope, 64-bit apache2.2 and still the same error:
Processing profile
- Opening Flash archive
HTTP server returned an invalid archive file size:
<-2116410290> bytes
ERROR: Invalid HTTP headers were returned from the
server
ERROR: Flash installation failed
Solaris installation program exited.
apache log:
192.168.224.112 - - [06/Jul/2006:20:52:45 +0200]
"HEAD /flash/archives/pt_sol_10_oem.flar HTTP/1.1"
200 -
192.168.224.112 - - [06/Jul/2006:20:52:45 +0200] "GET
/cgi-bin/bootlog-cgi?%3Ctime%3E+wanboot_client+ident:+
%5BID+380565+user.panic%5D+HTTP+server+returned+an+inv
alid+archive+file+size:+%3C-2116410290%3E+bytes
HTTP/1.1" 200 32
192.168.224.112 - - [06/Jul/2006:20:52:45 +0200] "GET
/cgi-bin/bootlog-cgi?%3Ctime%3E+wanboot_client+ident:+
%5BID+592631+user.panic%5D+Invalid+HTTP+headers+were+r
eturned+from+the+server HTTP/1.1" 200 32
192.168.224.112 - - [06/Jul/2006:20:52:45 +0200] "GET
/cgi-bin/bootlog-cgi?%3Ctime%3E+wanboot_client+ident:+
%5BID+915281+user.panic%5D+Flash+installation+failed
HTTP/1.1" 200 32
Any help would be much appreciated.hi. i spent a long time on this issue...and got it working reliably for more than 10 gb flars.
there are two issues- 1) apache must be 64 bit capable, and 2) you need the latest wanboot miniroot, for solaris 9 and one for solaris 10. i worked for a different division of a major car company based in stuttgart (take a guess) than i do now, and we eventually received the support we needed from sun, through the early release program. i do not know any details about if, how, or when those miniroots are otherwise available. at some point, i can only assume they will be generally available to all, if not already.
if someone knows more about this availability issue, i would also be interested in this issue.
thanks, dls

In perfdatasource querying for global snapshot failed with error 'the size limit for this '

I received scom alerts from two win 2k8 r2 servers , hosting exchange 2010 mailbox roles , the alerts came almost in same time from both servers ,
can I ignore those alerts
or can someone give a me a clue how can I troubleshoot those alert , please any help would be appreciated
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
from Ops-mgmt logs
Log Name: Operations Manager
Source: Health Service Modules
Date:
Event ID: 10104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server 1
Description:
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.OperatingSystem.PercentMemoryUsed.Collection
Instance name: Microsoft Windows Server 2008 R2 Enterprise
Log Name: Operations Manager
Source: Health Service Modules
Date:
Event ID: 10104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server 1
Description:
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.LogicalDisk.PercentIdle.Collection
Instance name: " edb file path "
Log Name: Operations Manager
Source: Health Service Modules
Date:
Event ID: 10104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server 2
Description:
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.NetworkAdapter.CurrentBandwidth.Collection
Log Name: Operations Manager
Source: Health Service Modules
Date:
Event ID: 10104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server 2
Description:
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.ForefrontProtection.FPE.Server.PerformanceCollection.RealtimeScanMessageRate

Hi Blake ,
Thanks for your reply , I appreciate your help ,
I didn't put the alert from scom console because they were same as the events ( same source )
Health Service Modules, I didn't want to spam
more :-)
also the two servers encountered the issue were mailbox servers and part of same DAG , it worth mention the alert were resolved
by Exchange 2010 Correlation Engine service
http://blogs.technet.com/b/kevinholman/archive/2010/10/15/clustering-the-exchange-2010-correlation-engine-service.aspx
http://support.microsoft.com/kb/2592561
also the Opsmgmt logs are full of waring and error event like 2023 , 21402 , 21403 , 1207 !!
Log Name: Operations Manager
Source: HealthService
Date:
Event ID: 2023
Task Category: Health Service
Level: Warning
Keywords: Classic
User: N/A
Computer: server 1
Description:
The health service has removed some items from the send queue for management group "SCOM" since it exceeded the maximum allowed size of 15 megabytes.
1- alert from console >>
In PerfDataSource, querying for Global Snapshot failed with error 'The size limit for this '
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.OperatingSystem.PercentMemoryUsed.Collection
Instance name: Microsoft Windows Server 2008 R2 Enterprise
EventSourceName: Health Service Modules

ISE Alarm: Warning: Profiler Queue Size Limit Reached

Similar Messages

Maybe you are looking for