Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

MSG Smart Search fails, errors about CloudSearch module reporting service unavailable and response code 503

Issue:

Smart Search reports that search fails and there are repeated eid.general-errors in the MSG alert viewer

The errors have the following rawlog-data:

[] err src=admin mod=CloudSearch sub=getResults err="Service unavailable"
[] err src=admin MISUtil::getIndexList failed. Response code: 503. url: https://:10000/mis/_stats/store

Resolution:

These messages could be a result of the Smart Search service being stopped. This might be the result of a system update or patch causing the service to hang.

To check if the Smart Search service is running:

  1. Log in to the MSG Web UI
  2. Select the System-tab
  3. Navigate to System -> Servers using the left-side menu
  4. Click the plus-sign next to the server names to expand information about their running services (Smart Search by default runs on the configuration master)
  5. Check the status of the service pss
  6. If it is stopped, use the Start-button to the right in the action-column to attempt a restart. Trying this a few times might be needed

If the service doesn't start, open a support ticket. Also make sure that the following support IP-addresses can access the MSG-appliance on ports 22 and 10000:

203.112.232.170                 F-Secure Support / Kuala Lumpur
193.110.108.33                   F-Secure Support / HTC Helsinki
208.86.202.10                     Proofpoint
208.84.66.21                       Proofpoint
208.84.67.21                       Proofpoint