locked
Microsoft ATA Lightweight Gateway Stuck on Starting RRS feed

  • Question

  • Hi can someone help figure out the issue as service was stuck on starting see below logs

    2020-02-05 08:29:43.5195 2840 5   Error [WebClient+<InvokeAsync>d__8`1] System.Net.Http.HttpRequestException: PostAsync failed [requestTypeName=StopDataCollectorSetRequest] ---> System.Net.Http.HttpRequestException: Response status code does not indicate success: 500 (Internal Server Error).
       at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode()
       at async Microsoft.Tri.Common.Communication.WebClient.PostAsync[](?)
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       --- End of inner exception stack trace ---
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       at async Microsoft.Tri.Gateway.Communication.PerformanceCounterCategoryManagerProxy.StopDataCollectorSetAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.PerformanceCounterManager.OnStartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Module.StartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.ModuleManager.OnStartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Module.StartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Service.OnStartAsync(?)
       at Microsoft.Tri.Infrastructure.Framework.Service.OnStart(String[] args)
    2020-02-05 08:31:32.0480 3012 5   Error [WebClient+<InvokeAsync>d__8`1] System.Net.Http.HttpRequestException: PostAsync failed [requestTypeName=StopDataCollectorSetRequest] ---> System.Net.Http.HttpRequestException: Response status code does not indicate success: 500 (Internal Server Error).
       at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode()
       at async Microsoft.Tri.Common.Communication.WebClient.PostAsync[](?)
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       --- End of inner exception stack trace ---
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       at async Microsoft.Tri.Gateway.Communication.PerformanceCounterCategoryManagerProxy.StopDataCollectorSetAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.PerformanceCounterManager.OnStartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Module.StartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.ModuleManager.OnStartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Module.StartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Service.OnStartAsync(?)
       at Microsoft.Tri.Infrastructure.Framework.Service.OnStart(String[] args)
    2020-02-05 08:33:35.8266 420 5   Error [WebClient+<InvokeAsync>d__8`1] System.Net.Http.HttpRequestException: PostAsync failed [requestTypeName=StopDataCollectorSetRequest] ---> System.Net.Http.HttpRequestException: Response status code does not indicate success: 500 (Internal Server Error).
       at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode()
       at async Microsoft.Tri.Common.Communication.WebClient.PostAsync[](?)
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       --- End of inner exception stack trace ---
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       at async Microsoft.Tri.Common.Communication.WebClient.InvokeAsync[](?)
       at async Microsoft.Tri.Gateway.Communication.PerformanceCounterCategoryManagerProxy.StopDataCollectorSetAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.PerformanceCounterManager.OnStartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Module.StartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.ModuleManager.OnStartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Module.StartAsync(?)
       at async Microsoft.Tri.Infrastructure.Framework.Service.OnStartAsync(?)
       at Microsoft.Tri.Infrastructure.Framework.Service.OnStart(String[] args)

    Wednesday, February 5, 2020 10:37 PM

All replies

  • The problem is in the Updater process, please get the errors from there.

    It tries to stop the data collector, but fails, the updater should show us why...

    Wednesday, February 5, 2020 11:00 PM
  • Hello,

    You can find the log files at location: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Logs.

    The log file name is Microsoft.Tri.Gateway.Updater.log. More details about how to use the logs, please click the following link.

    https://docs.microsoft.com/en-us/advanced-threat-analytics/troubleshooting-ata-using-logs

    Best regards,
    Andy Liu


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, February 10, 2020 2:33 AM
  • Hello,

    Just to follow up, I would like to check if there is any update about this case.

    Have you view the logs from the recommended location?

    If you still have any other questions, please feel free to submit here.

    Best regards,

    Andy Liu


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, February 13, 2020 4:17 AM
  • The problem is in the Updater process, please get the errors from there.

    It tries to stop the data collector, but fails, the updater should show us why...

    Hello,I have the same problem.And I checked the microsoft docs .I get solution like this 

    1. Under the registry keys, if there is a DWORD value called Disable Performance Counters make sure it is set to 0HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PerfOS\Performance\ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PerfProc\Performance

    2. Then restart the Pla service. The ATA Lightweight Gateway will automatically detect the change and restart the service.

    And I checked my registry all was configured right.Then I checked updater log. It  said 

    System.ComponentModel.Win32Exception: The request is not supported

       at Microsoft.Tri.Infrastructure.Extensions.PlatformInvokeExtension.ThrowWin32ErrorException(Win32ErrorCode win32ErrorCode, Win32ErrorCode[] allowedWin32ErrorCodes)
       at Microsoft.Tri.Infrastructure.Utils.Job.SetJobInformation[TInformation](JOBOBJECT_INFO_CLASS informationClass, TInformation information)
       at Microsoft.Tri.Infrastructure.Utils.Job.SetCpuRateMaxPercentage(Double cpuRateMaxPercentage)
       at async Microsoft.Tri.Gateway.Updater.Gateway.GatewayUpdaterResourceManager.RestrictCpuAsync(?)
       at async Microsoft.Tri.Gateway.Updater.Service.GatewayUpdaterWebApplication.<>c__DisplayClass3_0.<OnInitializeAsync>b__7(?)
       at async Microsoft.Tri.Common.Communication.CommunicationHandler`2.InvokeAsync[](?)

    Can you help to solve the error?

    Saturday, June 13, 2020 8:03 AM
  • We are blocked from setting job CPU limits on the machine.

    Most likely DFFS is enabled on the machine, or CPU Quota.

    Check the registry to see if under HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Quota System

    See if you can find EnableCpuQuota=1., and if yes, set it to 0 (default)

    • Proposed as answer by Babaduer Monday, June 15, 2020 1:39 PM
    Saturday, June 13, 2020 5:31 PM