Failed to insert event due data too long for column 'event_msg'

Document ID : KB000094841
Last Modified Date : 07/05/2018
Show Technical Document Details
Issue:
The SRM (Spectrum Report Manager) reporting database is out of synchronization. It stopped processing the events from the Archive Manager.

The following errors were found in the $SPECROOT/tomcat/logs/stdout.log or catalina.out file:

May 02, 2018 09:38:00.784 (SRM/LandscapeManager/LandscapeThread_0) (SRM_Events) - (ERROR) - Failed to insert event into event table. SQL Exception code: 1406 SQL Exception message: Data truncation: Data too long for column 'event_msg' at row 1 Last known event time = 1524374934000
May 02, 2018 09:38:00.784 (SRM/LandscapeManager/LandscapeThread_0) (SRM_Events) - (ERROR) - event record (mh=0x133dde, type=0x6330076, time=2018-04-22 02:28:54.0)
May 02, 2018 09:38:00.971 (SRM/LandscapeManager/LandscapeThread_0) (SRM_Events) - (ERROR) - Database ERROR processing events for domain SpectroSERVER01. Will not poll domain 
Environment:
CA Spectrum 10.x and CA UIM 8.x with SNMP Gateway probe 1.40
Cause:
There is an event with too long string in the event message, tons of ":Cleared" word.
 
"Apr 22, 2018 2:28:56 AM BRT","","","Server01","Sun 22 Apr, 2018 - 02:28:56 - NIMSOFT SNMP GATEWAY

Nimsoft Event generated with the following details:
----------------------------------------------------------------
Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared 
.
.
.
:Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Cleared :Event - MSExchange event: Source=MSExchange ADAccess, Severity=warning, Message=Process w3wp.exe () (PID=14536). Configuration object CN=Custom Message Tracking-CL - Recipient Management,CN=Role Assignments,CN=XXXX,CN=YYYYYY,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local read from SERVER102.domain.local failed validation and will be excluded from the result set.  Set event logging level for Validation category to Expert to get additional events about each failure.
Source: Server01
IP/HostName: 10.15.207.143
Level: 0
Suppression Key: 
Probe Name: exchange_monitor
Origin: PRIMARY-HUB
UIM_Alarm_ID: LI97117153-53791
Alarm Source: 2
ChangeOwner: 3
ModifiedTime: 
Trouble Ticket ID: 
Trouble Shooter: 
User Tag 1: BR_SP_OFFICE 365
User Tag 2: 
Custom 1: 
Custom 2: 
Custom 3: 
Custom 4: 
Custom 5: 
================================================================
Spectrum Event ID: 0x06330076","specadmin","UIMVM","0x6330076","10"

This event was generated due the SNMP Gateway probe is sending traps to SpectroSERVER.
But the CA Spectrum and CA UIM integration was not supposed to be using the SNMP Gateway probe as the spectrumgtw probe has already been deployed and configured.
Resolution:
Disable the SNMPgtw probe on the CA UIM side and delete the events with too long data string in the vardata_string field of ddmdb.event table and then bounce the Spectrum Tomcat service.

Here are the steps to delete the problematic event code in Archive Manager's database (DDMdb):

1. Open a bash shell (bash -login)

2. Navigate to $SPECROOT/mysql/bin directory

    cd mysql/bin

3. Launch the MySQL command prompt

    ./mysql -uroot -proot ddmdb (for Windows)

    ./mysql --defaults-file=../my-spectrum.cnf -uroot -proot ddmdb (for Linux or Solaris)

4. Run the following MySQL query:
    DELETE FROM event WHERE type=0x6330076; 
Additional Information:
How to query the DDMdb for long event message string
Document ID : KB000094786
https://comm.support.ca.com/kb/how-to-query-the-ddmdb-for-long-event-message-string/kb000094786

Report Manager event processing failed, with Data truncation errors: Data too long for column 'event_msg'.
Document ID    KB000008648
https://comm.support.ca.com/kb/Report-Manager-event-processing-failed-with-Data-truncation-errors-Data-too-long-for-column-eventmsg/KB000008648