nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

ArcGIS Data Store has detected an issue with 'db'

Sehafiz

I am using ArcGIS Enterprise 11.3 with ArcGIS Portal, Web Adaptors, Hosting Server, Data Store and another federated ArcGIS Server - each installed on separate virtual machines with Windows Server 2019 OS.

From ArcGIS Hosting Server Manager log, I can see there is a warning that says ArcGIS Data Store has detected an issue with 'db'. This message actually comes from the Data store log that I confirmed when I checked the Data Store log file from within the Data Store machine. Usually it appears after a certain interval. Not the same interval every day. It may appear every 5 minutes or every 9 minutes and sometimes there is a big 3-4 hours gap and then starts appearing.

I raised this issue with local Esri and they could not replicate the issue and could not find the cause of the issue. During the investigation the machine resources were checked like CPU, RAM, Disk Space etc. Nothing found insufficient. I had unique SSL certificates for each machine with the required Subject Alternative Names (SANs) and the machines were trusting each other. Someone else advised to use the same single SSL certificate across all the machines with one common name and the required SANs. I implemented that. Still I get the same warning message.

Is there anything I can do to find the root cause of the message thereby find a solution to fix it?

Following is a screenshot of the error message.

Thank you.

タグ付きの投稿をもっと見る

Accepted answers

Sehafiz

Hi @OzanCanT ,

Finally I was able to resolve the issue.

1. The Primary Site Administrator (PSA) of Hosting Server was disabled.

2. I updated the SSL certificate for the relational data store but I never updated the SSL certificate for webserver communication.

When I enabled the PSA, the warning message stopped appearing.

When I upgraded the system to 11.5, deleted Tile Cache Datastore, installed Object Store, updated SSL certificate for Web Server along with relational data store, disabled PSA on Hosting Server; I noticed that the warning message does not appear any more.

All comments

CodyPatterson

Hey @Sehafiz

In the ArcGIS Server Manager, under Site, Server Configuration, Data Stores, do you see the 'db' database there? If so, does it validate, and if it does/doesn't, do any issues regarding this specific database come up during a webgisdr backup?

The main reasons I say this is because I have a similar issue of a corrupted database, where I found it coming up in the logs, it validated correctly, but it threw errors during the webgisdr backup. I had to delete the database out, and recreate it. Before deleting anything though, please let me know if this fits your issue!

Cody

Sehafiz

Hi @CodyPatterson,

Thank you for your reply.

No, 'db' does not exist there. Instead, it is there in the ArcGIS Portal machine.

Hafiz

Sehafiz

During the investigation the following was taken into consideration. But this did not help.

https://support.esri.com/en-us/knowledge-base/error-arcgis-data-store-has-detected-an-issue-with-db-000026836

OzanCanT

Hi @Sehafiz ,

While these logs are being logged, did you test if you can publish a feature layer hosted from the Portal?

Also, for further checks, you can check Event Viewer on the machine where Data Store is installed and look at the Windows Logs > System and Application logs for the time intervals when the "Issue with db" logs were logged to see if there are any indications of problems with the ArcGIS Data Store service or installation.

Sehafiz

Hi @OzanCanT ,

Thank you for your reply.

Yes, I can publish a feature layer hosted from the Portal.

I checked the Event Viewer. There is no indication in Windows Logs > Application. But there are error events in Windows Logs > System.

Following are some of the messages from the latest ArcGIS Server log and the messages from the Event Viewer. Times of the errors in the event viewer and ArcGIS logs are not the same though.

From https://learn.microsoft.com/en-us/answers/questions/2628317/event-viewer-error-there-was-an-error-while-attemp?forum=windows-all&referrer=answers I learnt about the location of the hosts file.

I noticed that the "hosts" file is named as "hosts2" in C:\Windows\System32\drivers\etc and it looks like it was modified on 9 May 2025. I have no idea about this file and how it was created and renamed. I never look at this. Our IT may have knowledge about this.

Do you have any advice?

OzanCanT

Hi @Sehafiz ,

The hosts file is the first place your machine looks for DNS resolution. In other words, it is where IP-URL mapping takes place. You mentioned that the file name has changed. This is not good, as your machine should first search here and then go to the DNS server. You can see which IP address you are currently using as your DNS server by using the nslookup command in cmd.

You may need to consult your IT team to find out why this file was changed.

You may also want to review the additional logs located at "<Disk>:\ arcgisdatastore\logs\MachineName>\database" on the Data Store machine for more detailed logs. If you can check and share your findings in the logs, we can look at it together.

Sehafiz

Hi @OzanCanT ,

Thank you for the advice.

I got the original version of the hosts file. I copied it into the location and since then the event viewer stopped reporting about the file. However, the file is a default one and does not include any of our machine IPs etc. following is a screenshot of the contents of the file.

From the log located in "<Disk>:\ arcgisdatastore\logs\MachineName>\database" I see the following message

Screenshot from postgresql log of Data Store

For this "could not accept SSL connection: An established connection was aborted by the software in your host machine" message the esri consultant recommended to use a single certificate across all the participating machines with all the SANs and a common name in ArcGIS Enterprise and I did so. But the message still appears.

I am keen to resolve the issue and I appreciate your effort and time to assist me.

OzanCanT

Hi @Sehafiz ,

According to the error you got, the SSLs you use do not seem to be installed to the Trusted Storage on the machines. You can put the SSLs to the Trsuted Storage by double-clicking the used SSLs with the PFX format. After a machine restart, I believe this workflow will prevent both of the error messages from being logged.

Sehafiz

Hi @OzanCanT ,

Thank you for the advice.

When I look for the "Trusted Storage", I found the folders as shown in the following screenshot. In which folder exactly you want me to install the pfx?

Also, is it only the pfx or you want me to install the full chain, including Root, Intermediate and the pfx?

OzanCanT

Hey @Sehafiz ,

Thanks again for the details, based on what you shared earlier. I noticed that you're now using a single SSL certificate with the necessary SANs across all sites. That's generally OK, but I’m wondering if the single certificate you are using contains the FQDNs of all components (portal,server,datastore etc.) in the SAN.

From the SSL warning message you're seeing, it doesn’t seem like a full handshake failure, more like a trust or hostname mismatch issue that might be popping up occasionally. ArcGIS Data Store can log these as a warning even if the overall communication works.

To rule out any cert trust or SAN-related problems, you might want to validate the SSL handshake from both directions using OpenSSL (you must install it first for use on the command line).

From Hosting Server to Data Store:
Open Command Prompt on the hosting server and run:
openssl s_client -connect <datastore-fqdn>:2443
Do the same from the Data Store machine back to the Hosting Server:
openssl s_client -connect <hostingserver-fqdn>:6443

If the results includes "Verify return code: 0 (ok)" thats great! But if you see something like this: "Verify return code: 18 (self-signed certificate)". That means the cert is not trusted by the machine you're testing from. It will not always breaks the connection but you might get a warning. Also, you can check if all the SANs are there and valid with same command.

Let me know your findings, and we can dig deeper after that.

Sehafiz

Hi @OzanCanT ,

The SANs in the certificate I have used are

DNS Name: example.domain.com (The domain that we use to access Portal, ArcGIS Server and Hosting Server. For example, to access Portal we use example.domain.com/portal)
DNS Name: Web Adaptor FQDN
DNS Name: Portal for ArcGIS FQDN
DNS Name: Federated ArcGIS Server FQDN
DNS Name: Hosting Server FQDN
DNS Name: DataStore FQDN

To install the OpenSSL, I will need permission from a board of members. It will take some time. Unfortunately I will be away for few weeks and I will not be able to finish the installation before I go.

Do the above SANs give you any hint or still you want me to test using OpenSSL?

Thank you very much.

OzanCanT

Hi @Sehafiz ,

Thank you for the update.

The SANs listed in the certificate look appropriate. Could you also confirm the Common Name (CN) value of the certificate? Ideally, the CN should also be example.domain.com, which seems to be your primary domain used for accessing Portal and Server.

Additionally, can you clarify whether the SSL certificate in use for the initial sites is:

A self-signed certificate
An internal domain certificate (issued by your organization’s internal CA)
Or a public CA-signed certificate

This could help us better assess if trust issues or handshake failures may be occurring due to certificate trust chains.

As for the OpenSSL command — it’s a very lightweight and effective tool to manually verify whether a proper SSL handshake can occur between your ArcGIS Server and Data Store endpoints. However, we understand your situation and appreciate the constraints.

Once you're back, I'd strongly recommend doing an OpenSSL test both:

From the Server machine to Data Store (openssl s_client -connect <datastore-fqdn>:2443)
And from the Data Store machine to the Server (openssl s_client -connect <server-fqdn>:6443)

Let me know the CN and certificate type when possible, and safe travels!

Best regards,
Ozan

Sehafiz

Hi @OzanCanT ,

Thank you for the prompt reply.

Yes you are right. The CN is example.domain.com.

We are using two certificates.

Internally - When the sites are accessed internally - it uses domain certificate, issued by the organization.

Externally - When the sites are accessed externally - it uses public certificate issued by Azure Front Door (AFD).

Thank you again for helping me.

Sehafiz

Hi @OzanCanT ,

Finally I was able to resolve the issue.

1. The Primary Site Administrator (PSA) of Hosting Server was disabled.

2. I updated the SSL certificate for the relational data store but I never updated the SSL certificate for webserver communication.

When I enabled the PSA, the warning message stopped appearing.

会話に参加する

サインインしたメンバーは投稿、更新のフォローなどができます。初めてですか？無料アカウントを登録してください。

クイックリンク

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.