KAJY63034-W
Although execution of a response action ended, a response-action status notification event cannot be issued because the information about the response action does not exist in the ResponseAction results-management database. (detailed information = detailed-information)
Response action has finished executing, but response action status notification event could not be issued because ResponseAction results-management database does not contain response action data.
- S:
-
Processing continues.
- O:
-
Check whether the number of saved ResponseAction results-management database is appropriate. If it is not, estimate the number of saved ResponseAction results-management database and set an appropriate number.
If the number of saved ResponseAction results-management database items is set appropriately, the execution of response action may be delayed. Review the content of response action from the following points of view.
-
If you have more than one response action for an event, you can run multiple response action together in a single batch file (shell script) to improve execution efficiency and reduce execution delay.
-
If your response action is performing unwanted stdout and stderr output, consider reducing the output. By reducing output, execution efficiency can be improved and execution delay can be reduced.
-