000034184 - RSA ECAT 4.x SQL Job ECAT_DatabaseCleanup fails after moving the database

Document created by RSA Customer Support Employee on Oct 25, 2016Last modified by RSA Customer Support on Jun 9, 2019
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000034184
Applies ToRSA Product Set: NetWitness Endpoint
RSA Version/Condition: 4.4.x
Platform: Windows, MS SQL Server
IssueAfter moving the ECAT database files (for example: ECAT$PRIMARY.mdf and ECAT$PRIMARY_log.ldf), the SQL Server Job, ECAT_DatabaseCleanup now fails.
CauseMoving the database files can change the owner of the database, or if the Log On As that runs the SQL Server Agent (MSSQLSERVER) service has changed, then the service no longer has permission to run the SQL Server Job, ECAT_DatabaseCleanup.

To confirm if this is the case, on the SQL Server database system, start the Microsoft SQL Server Management Studio program.
  1. Open on the left SQL Server Agent > Jobs
  2. Right-click ECAT_DatabaseCleanup > View History
  3. Click the + symbol on one of the failed jobs.
The database login permission issue will be indicated if it shows the error was due to ECATSYNC. User does not have permission to perform this action.

User-added image
User-added image
  1. On the SQL Server database system, enter the following: services.msc
    Look for the service "SQL Server Agent (MSSQLSERVER)", and note the Log On As used by this service.
    It will be formatted as a "domain\user" type of login.

    User-added image

    This user must be SYSADMIN on the server.
  2. Stop the SQL Server Agent (MSSQLSERVER) service.
  3. Start Microsoft SQL Server Management Studio and run the following SQL command:

    TO [domain\user];

    Substitute domain\user with the Log On As used by the SQL Server Agent (MSSQLSERVER) service, from Step 1 (NT Service\SQLSERVERAGENT in the above example).
  4. Start the SQL Server Agent (MSSQLSERVER) service.
  5. Run the SQL Server Job, ECAT_DatabaseCleanup, or wait for its next scheduled run, to confirm it now works.