Hey guys,

since yesterday night, we have the problem, that the "Soti Mobi Control mangement service" and "search service" don't start anymore.

We are using Soti Mobicontrol 15.6 and Windows Server 2016

when i try to start the managment service ive got this error in the managment logs:

[2024-07-21 08:16:53.479] INFO  [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (32): Started heartbeat monitor.
[2024-07-21 08:16:53.501] INFO  [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (23): Comm.Client.65103039: Server sotitest.ernsting.de has been authenticated. Chipher: Aes256/256
[2024-07-21 08:16:53.502] INFO  [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (23): Comm.Client.65103039: Connected to [fe80::72ee:5eb2:9616:96d6%14]:5494
[2024-07-21 08:16:53.515] INFO  [Signal] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (32): LocalCTEngine
[2024-07-21 08:16:53.520] INFO  [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (40): New worker started
[2024-07-21 08:16:53.580] INFO  [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (40): Soti.Comm.Protocol.CommClient: Processing message: "ServerStatusMsg":{},"ServerStatusMsg":{"ServerStatus":1,"ServerTime":"21.07.2024 08:16:53","ServerId":3,"OnlineDeviceCount":15,"WorkerThreadCount":4,"QueueLength":0,"SelectedSystemTick":0,},"Message":{"TimeStamp":"21.07.2024 06:16:53",}
[2024-07-21 08:16:53.587] INFO  [DeploymentServer] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (40): Deployment Server '3' status changed to 'Started'.
[2024-07-21 08:16:53.650] ERROR [ManagementService] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (18): Unable to check Elasticsearch status, Failed to ping the specified node.. Call: Status code unknown from: HEAD /
[2024-07-21 08:16:53.721] ERROR [ManagementService] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (18): 

********************************************************************
* Exception: Failed to create perfmetrics index for ElasticSearch. *
********************************************************************
[ElasticSearchException: Failed to ping the specified node.. Call: Status code unknown from: HEAD /]
   bei Soti.Integration.ElasticSearch.Implementation.ElasticSearchClient.LogResponseAndCheckForErrors(IApiCallDetails apiCallDetails, Exception originalException, ServerError responseServerError)
   bei Soti.Integration.ElasticSearch.Implementation.ElasticSearchClient.IndexExists(String indexName)
   bei Soti.MobiControl.Search.Implementation.ElasticSearchClientWithMonitor.IndexExists(String indexName)
   bei Soti.MobiControl.Search.Implementation.MetricSearchInfoManager.CreateIndex(Boolean recreate)

   {
   [ElasticsearchClientException: Failed to ping the specified node.. Call: Status code unknown from: HEAD /]
   
   }

      {
      [PipelineException: Failed to ping the specified node.]
         bei Elasticsearch.Net.RequestPipeline.Ping(Node node)
   bei Elasticsearch.Net.Transport`1.Ping(IRequestPipeline pipeline, Node node)
   bei Elasticsearch.Net.Transport`1.Request[TResponse](HttpMethod method, String path, PostData data, IRequestParameters requestParameters)
      }

         {
         [PipelineException: An error occurred trying to read the response from the specified node.]
            bei Elasticsearch.Net.RequestPipeline.Ping(Node node)
         }

            {
            [WebException: Die Verbindung mit dem Remoteserver kann nicht hergestellt werden.]
               bei System.Net.HttpWebRequest.GetResponse()
   bei Elasticsearch.Net.HttpWebRequestConnection.Request[TResponse](RequestData requestData)
            }

               {
               [SocketException: Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte 172.xx.xxx.x:9200] (I replace the ip with "x")
                  bei System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   bei System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception)
               }

********************************************************************

[2024-07-21 08:16:54.001] INFO  [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (4): Starting connection to NetMQ at tcp://127.0.0.1:8540
[2024-07-21 08:16:54.079] INFO  [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (4): WebAPI Global Host: Host started at: https://+/mobicontrol
[2024-07-21 08:16:54.079] INFO  [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (4): WebAPI Global Host: Starting hostable WebApi controllers ... done

This error shows the Windowsprotocoll:

Name der fehlerhaften Anwendung: Soti.MobiControl.ManagementService.Host.exe, Version: 15.6.5.15, Zeitstempel: 0x64d3c4ad
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.17763.6054, Zeitstempel: 0xc9a93043
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000000000041b39
ID des fehlerhaften Prozesses: 0xe8c
Startzeit der fehlerhaften Anwendung: 0x01dadb358c646cd0
Pfad der fehlerhaften Anwendung: C:\Program Files\SOTI\MobiControl\Soti.MobiControl.ManagementService.Host.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: 844ebd87-09de-477e-b0b0-2e4e499ae25c

Ive checked the Firewall, but there is no blocked. We have 2 Servers, 1 Prod and 1 test and the 2 Server get the same problems yesterday.

Has anyone an idea?