Environment
Security Manager 6.5.2 and earlier
Situation
After running for a brief period, the Log Archive Server (LAS) stops unexpectedly
Resolution
Service Pack 3 (SP3) for Security Manager 6.5 corrects this issue.
Click the following link to download Service Packs for Security Manager (Note: requires access to locked resources)
https://www.netiq.com/support/sm/extended/sp.asp
Cause
After starting the LAS, if the log archive server receives bad data from an agent computer and cannot successfully index the data or close the partition in which the data is stored, the indexing processes continue to run, consuming resources on the log archive server, until the NetIQ Security Manager Log Archive service stops unexpectedly. This can occur after a time period of 15 minutes to 2 hours from when the LAS was started.
Additional Information
Formerly known as NETIQKB72628