Lock file error in Windows event viewer on Anomaly Detector server ( Legacy KB ID NTQ 00001020 )

Document ID : KB000023278
Last Modified Date : 14/02/2018
Show Technical Document Details

Problem:

 

·         In the Windows "Application" event viewer, an error is shown with the following text: Event ID: 1 Description: AnomalyDetector process failed in the continuing loop with the following error: System.Exception: warning - NQAD is already running [lock file is d:\netqos\nqad\bin\NQADrunning.txt -. Restart not done. at AttackDetector.HunterTracker.s:artHunterTracker() at NetQoSHunterTracker.HTService.timer_Elapsed(Object sender, ElapsedEventArgs e)

 

Steps to reproduce:

 

·         This error randomly occurs just after a restart of the NetQoS Hunter Tracker service.

 

Resolution

 

·         Stop the NetQoS Hunter Tracker service.

 

·         Enter directory D:\NetQoS\NQAD\bin .

 

·         Rename file NQADrunning.txt to a .old extension.

 

·         Restart the NetQoS Hunter Tracker service.

 

·         Now, there should be a new file named NQADrunning.txt, and a refresh of the Windows event viewer should not contain another such error.