Date:2014-12-15 OS: Windows/Linux Etrack Incidents: 3226294, 3328730, 3468688, 3550230, 3600287, 3601788, 3602680, 3607863, 3613167, 3613699, 3627354, 3634825, 3638994, 3655521, 3658402, 3655801, 3666745, 3667842, 3676254, 3682627, 3682927 Errors/Problems Fixed: 3226294 - Display similar filtering for Dashboard as for Analytics view. 3328730 - If a report fails or is canceled, the temporary activity index files generated during the report run in order to compute owner should get deleted. 3468688 - Enhance performance of retrieval of subfolders and files under a path selected for archiving using Enterprise Vault. 3550230 - DQL: Query ignores some shares' data when Device ID is supplied. 3600287 - "DFS Filers with permissions" filter under user centric permissions view does not show any device in list. 3601788 - DQL: Presence of same column twice in "Get" clause results in merge failure. 3602680 - Indexer fails to process a SharePoint audit file, stating that Path '/' can't be a file and hence unable to add event to index and exits with error=203. 3607863 - DQL: Query does not return values for multivalued attribute, such as dlp_policies, if you prefix the attribute name with object and do not provide FORMAT specifier. 3613167 - Maximum kernel ring buffer size changes to 0 when a template is used. 3613699 - Do not process 0 byte size files. Instead, delete them while salvaging old DB files in collector folder by using salvage.exe. 3627354 - Security event should not change last access timestamp for files and folders because many times, it does not get updated on file system. 3634825 - Show tooltip for DLP Policies column in Context Map. 3638994 - While performing an Active Directory scan, when a user/group record is fetched from the Domain Controller and some of the required fields are missing, the scan should continue after logging an error. 3655521 - winnas_util.exe crashes when the credential used to access the filer is not part of Administrators group. 3658402 - On restore, undelete the path from Data Insight. 3655801 - Index check exited with code 2 because of white space in Data Directory path. 3666745 - Scan end time is not correctly populated in GUI under Scanning Dashboard -> Scan History. 3667842 - DataInsightFpolicy Service does not update credentials when switched to run as Local System account. 3676254 - idxcheck should ignore non-indexed folders to check integrity. 3682627 - Enterprise Vault Archiving: While running the CreateWorkflowDBJob, expansion of paths in temporary workflow database fails in some cases. 3682927 - dqlexec fails to apply index on device.name = 'some_device'. NOTE: Incidents fixed in earlier rolling patches are listed at the end of this document. Install/Uninstall Instructions: Apply this rolling patch on all Data Insight servers with version 4.0, with or without earlier rolling patches applied. NOTE: Please keep a backup of the Data Insight files in the installation directory. This will be required in case you want to manually roll back the patch. High Level Steps: 1. Apply the rolling patch on the Management Server first, followed by all worker nodes. 2. Next, apply patch to Windows File Server agents (if applicable). 3. Next, apply patch to Microsoft SharePoint agents (if applicable). Patching the Data Insight Management Server and worker nodes: 1. Log on to each server with Administrative privileges. 2. Unzip the patch files to a temporary folder. In this folder, locate the rolling patch installer for the appropriate OS architecture. The installer is called Symantec_DataInsight_windows_40RP4_4_0_0_7000_x64.exe for 64 bit Windows OS, Symantec_DataInsight_windows_40RP4_4_0_0_7000_x86.exe for 32 bit Windows OS and Symantec_DataInsight_linux_40RP4_4_0_0_7000_x64.sh for 64 bit Linux OS. 3. Launch the installer executable to install the rolling patch. Patching Data Insight Windows File Server agents: 1. Unzip the patch files to a temporary folder. In this folder, locate the rolling patch installer bundles for Windows File Server agents. The agent bundle is called Symantec_DataInsight_windows_winnas_40RP4_4_0_0_7000_x64.zip for 64 bit OS and Symantec_DataInsight_windows_winnas_40RP4_4_0_0_7000_x86.zip for 32 bit OS. 2. Log into the Data Insight Management Console with Server Administrator privilege and upload the agent bundles to the appropriate Collector worker nodes using the "Upload Manager" page on the Settings tab. 3. Navigate to the Filer Details page for each configured Windows File Server from the Settings tab, and click on "Upgrade Agent" button available at the top of the page. This option is only visible if you have enabled the option to let Data Insight install/upgrade agent for this filer. 4. Alternately, to manually patch a Windows File Server agent, log on to the Windows File Server machine with Administrative privileges, unzip the agent installer bundle in a temporary location, and launch the patch installer. The patch installer is called Symantec_DataInsight_windows_winnas_40RP4_4_0_0_7000_x64.exe for 64 bit OS, and Symantec_DataInsight_windows_winnas_40RP4_4_0_0_7000_x86.exe for 32 bit OS. Patching Data Insight Microsoft SharePoint agent: 1. Log on to the SharePoint farm machine where the SharePoint agent has been previously installed. 2. Uninstall the old agent using the "Add/Remove Programs" applet in Control Panel. 3. Unzip the patch files to a temporary folder. In this folder, locate the SharePoint agent installer. The installer is called Symantec_DataInsight_sharepoint_40RP4_4_0_0_7000.exe for SharePoint 2007, Symantec_DataInsight_sharepoint2010_40RP4_4_0_0_7000.exe for SharePoint 2010, and Symantec_DataInsight_sharepoint2013_40RP4_4_0_0_7000.exe for SharePoint 2013. 4. Launch the installer to install the new agent. Additional Notes: 1. At this time, automated rollback of patch is not supported. To roll back the patch manually: a. Remember to take a backup of original files before you install the rolling patch. b. To roll back the patch, stop all Data Insight services, overwrite the patched files with original files from backup, and restart the services. 2. To confirm if a system has been patched, check the version of Data Insight using the Add/Remove Programs applet in the Control Panel. Following ETrack incidents have not been fixed in this release, however workaround for these is as below: 3371091 - Cannot select customattr.csv attributes in analytics configuration. Workaround: Manually type the name of the CSV file in the text box. Known Issue: After uninstalling Data Insight 4.0RP4, it is still shown in the Programs and Features list in the Control Panel. ******************************************************************************** Incidents fixed in 4.0 RP3 ******************************************************************************** 3526059 - DQL executable segment faults for getting path.custodians from permissions. 3430061 - Size of a folder includes size of its immediate deleted files. 3461399 - In case of a EMC Celerra device, audit events cannot be monitored for shares having characters "'" and "&" in the share name. 3486041 - Site collections discovery fails in a SharePoint web application if one of the site collections is blocked. 3495091 - When exclude paths for open shares dashboard contain DFS paths, physical shares associated with DFS paths are getting excluded. 3496290 - EmailUtils caches old value of SMTP host. 3506114 - For EMC Celerra, collector node should honor events where filer is not able to send client IP address in xml packets. 3513106 - Handle crash in segment read, when there is segment file mismatch and segment size in database is more than the on-disk size. 3513899 - Data Aging report shows zero sum values when a file is created and then deleted before creating a folder at same level with same name. 3525525 - Unique path permissions report shows path with non unique permissions. 3527342 - Support for getting paths with unique permissions in Entitlement Review Report. 3528784 - Windows File Server fails to scan, and both filer and Scanner credential test connections fail in Data Insight console. 3529478 - DQL query that contains non-English characters does not work. 3551757 - Memory utilization on Linux indexers will not report any thing where used memory is greater than what can be reported. 3553253 - Data Insight Fpolicy service should ignore corrupted .tmp file for finalizing and move ahead and start the service, instead of refusing to start. 3523557 - report.exe crashes for non-existing path or a path with no activity. 3581620 - Data Insight Fpolicy service trying to connect to NetApp filer that is no longer configured. 3559929 - Linux indexers are showing incomplete DQL reports and crashes with exit code 139. 3586906 - New properties for not disconnecting filers due to high latency when not monitoring CIFS or NFS shares. 3469487 - Dashboard report fails if index.db version is ahead of the activity-index. 3497213 - Unable to save a filer if credentials used for adding filer have all digits in the username. 3495247 - For large number of SharePoint site collections, scan times out with exit code 200. 3497232 - Accessed By or Modified By metadata is not displayed on Workspace > Overview tab. 3489902 - For large number of SharePoint site collections, audit times out with exit code 200. 3564835 - EMC Celerra share discovery should not discover NFS exports. 3524747 - Unblock master report thread in case output dbs are downloading from indexers. 3551731 - Linux Indexer keeps going into an unknown state in the console. 3486521 - DQL query "FROM activity GET path.owner.user.name" fails. 3553195 - Due to incorrect settings for thread queue and core pool size, only one report can be downloaded in entire deployment. 3584907 - Compute memory consumption using "free" command instead of "top" command. 3566272 - Entitlement Review Report with large number of custodians fails due to memory leak. ******************************************************************************** Incidents fixed in 4.0 RP2 ******************************************************************************** 3322450 - Data Insight is unable to display domain local group as a member group if it is added in local group of a Windows File Server or a NetApp filer. 3333195 - Performance improvement to Indexer. 3338064 - DLP sensitive policy list filter doesn't work for "Like" or "Not like" selection criteria. 3339324 - Controlpoint.exe is crashing. 3340194 - Incorrect membership for SharePoint local groups. 3341260 - DQL returns precision in the output. If file or share size is less than 1GB, then DQL returns size in GB as zero. 3341475 - Discover site collections with the correct URL in case of claims-based authenticated web application URLs. 3346260 - DLP settings in Data Insight change after upgrading Data Insight from 4.0 to 4.0 RP1. 3346852 - Disabled shares should be grayed out in the workspace like they are in the Settings page. 3349797 - Server column missing in email alerts. 3360081 - idxwriter.exe can crash if it needs to reopen the index while processing scan files. 3360996 - Ability to ignore disabled filers in reports. 3362626 - DLP policies count and DLP policies name filters are not working at folder level. 3363542 - DataInsightWinnas service is consuming high memory. 3365338 - DiscoverSharesJob never completes in a large distributed environment. 3366466 - Pull the sidhistory attribute from Active Directory. 3366484 - Scanner.exe crashes if file system type is not supported. 3368584 - adcli.exe crashes when adding sidhistory attribute. 3370111 - Provide option to clear all selected resources from the page selection view in report wizard. 3372289 - Index DB need not do an integrity check for every version. 3374567 - DQL throws syntax error if arguments of the "formatdate" function are incorrect. 3375441 - In reports, if copy report output step returns failure, then highlight the last run status accordingly, and show the warning icon. 3383035 - Duration function in DQL returns nothing if there is no space between number and unit. 3383281 - Data Insight 4.0 RP1 fails to display SharePoint version. 3386721 - Add missing filters from version 3.0.1 to Context Map on the Workspace tab. 3392016 - Update default sqlite page size to 32k for better performance. 3393618 - GUI freezes completely if you try to assign disabled user as custodian on a path. 3401723 - Unable to set "Ignore accesses made by LocalSystem accounts" property for a Windows File Server. 3401763 - Permission recommendation workflow is not getting fired in Data Insight 4.0 RP1. 3409975 - In case of data selection for reports, CSV upload times out for large number of paths. 3412719 - Check if .Net 3.5 framework is installed on the Collector node for SharePoint Servers. 3415120 - Reduce fragmentation in index copy operation. 3417580 - Incremental scan behavior is not consistent with full scan in case of reparse points. 3425797 - Custom cron schedule is not updated in GUI if it is changed using command line. 3429196 - Indexers not deleting older filehash and dirhash files on VxFS. 3429442 - adcli.exe corrupts the member hash in a certain scenario, when we encounter failed or disabled domains. 3430935 - Exclusion of Administrators@Filer group removes unrelated user entries from report output along with members of the Administrators@Filer group. 3431613 - Add New Policy wizard does not work. 3434169 - Access summary for paths - fix report design for SharePoint and NFS paths. 3434502 - Provision to exclude filers from control point process. 3435182 - Access details for paths - BuName and BUOwner value not getting mapped to all records. 3436563 - Cannot add SharePoint site collection with a space in the name. GUI shows invalid URL message. 3441213 - Double quotes in query causes DQL to fail on a Linux Indexer. 3444977 - Fix exception handling in web service during scan operation. 3446036 - Windows File Server agent share scan exits with error code 5 in case the Scanner credentials are from different domains. 3446438 - Reports > Select action does not show option to archive. 3453007 - Scanner does not go in throttle mode even if the latencies are high on the filer. ******************************************************************************** Incidents fixed in 4.0 RP1b ******************************************************************************** 3346255 - Issue fetching list of sensitive paths from DLP when DLP is configured with Kerberos authentication. 3348844 - Data Insight does not always recommend the correct patch number applicable for a server node. 3348991 - Permission reports consume excessive memory. ******************************************************************************** Incidents fixed in 4.0 RP1 ******************************************************************************** 2781513 - Access Pattern Map showing information in GMT for date as today. 3313610 - SharePoint - Enhance Local user scan job for 10000 site collections. 3098137 - Adding Folder Depth dropdown in Access Summary User/Path reports. 3164625 - EVClient - In case of WinNAS cluster, evclient sends the cluster name as parameter to EV which returns an error for all paths. 3211411 - Wildcard support in Exclude Rules for access events in case of SharePoint is not implemented. 3218248 - Path Permission report does not exclude Administrators group. 3219246 - Entitlement report - Exclude Group/user does not work. 3227205 - Inactive folders query should exclude deleted paths. 3257392 - Reports - parallelism for reports through GUI. 3263375 - Set control point depth analysis to 5 by default. 3272517 - Reports - Custom report output: Exclude column does not work with CSV output format. 3276079 - Enhance Access Summary report to allow for Depth Parameter. 3280454 - Provide option to copy report output to network file-share for reports. 3281612 - Enhancement in Sensitive job to do CSV based sensitive file import. 3284683 - Discovery of sharepoint webapp with 10000 site collection times out. 3292056 - Change the Event details of "Exit Code 1: Incorrect function". 3292723 - Add pagination to SharePoint scanner and sharepoint webservice when it fetches websites and lists within a site collection. 3281984 - Windows File Server agent registration fails with status code 500. 3298390 - Fetch local users from Netapp filers. 3302069 - Reports - redirect output to a network file share (only supports local drive currently). 3303981 - Do not delete SharePoint audit logs during specified period.