Forum Discussion

sdo's avatar
sdo
Moderator
10 years ago

SCSP log folder space filling up with 11 MB files

Hi,

NB5230 v2.6.0.2

We have six appliances.  Two are exhibiting a problem where the '/log/scsplog' folder is filling up rapidly with files such as:

 11M -rw-rw-r--  1 root   sisips  11M Sep 23 15:45 _SISIDSEvents54448.csv
 11M -rw-rw-r--  1 root   sisips  11M Sep 23 15:49 _SISIDSEvents54449.csv
 11M -rw-rw-r--  1 root   sisips  11M Sep 23 15:53 _SISIDSEvents54450.csv
 11M -rw-rw-r--  1 root   sisips  11M Sep 23 15:57 _SISIDSEvents54451.csv
 11M -rw-rw-r--  1 root   sisips  11M Sep 23 15:59 _SISIDSEvents54452.csv
 

Anyone have a suggestion as to where to look for root cause?

Perhaps a config file somewhere, with a log setting set to high?

 

I've checked the CLIsh / Monitor / SCSP / audit showsettings    and   serverinfo show

...and nothing untoward seen.

 

In the WebAdmin GUI of the two appliances, in Monitor / SCSP Events, I see many entries along teh lines of:

New Size:  2207595
Event Severity:  Information
Rule Name:  Netbackup_Appliance_File_Share_Change_Monitor
Event Date:  2014-10-15 04:07:02 BST
New Modification Date:  2014-10-15 04:06:56
Event Type:  File Watch
Sequence Number:  231337
Event Priority:  15
Consolidated Description:  Watched File Modified (/log/.LOGROOT/PD/log/spad/client-name/bpstsinfo/spad/101514.log)
Old Size:  2198650
Old Modification Date:  2014-10-15 04:05:58
File Name:  /log/.LOGROOT/PD/log/spad/client-name/bpstsinfo/spad/101514.log
Operation:  Modified

It would seem to me that SCSP is erroneously monitoring the '/log' path.

Does anyone know how to modify SCSP settings so that it does not monitor that path?

Thanks.

Backup and Recovery
Linux
NetBackup Appliance
Troubleshooting
  • sdo's avatar
    sdo
    Moderator
    10 years ago

    It looks like the web-admin GUI / Monitor / SCSP Events gets its data from the .csv files in /log/scsplog that do NOT begin with an under-score.  These such files are not growing rapidly.

    So I think we can ignore the entries shown in the web-admin GUI.

     

    The files that are accumulating rapidly, i.e. the csv files with a leading under-score '/log/scsplog/_*.csv' contain entries like:

    echo i/o error occurred (errno=0x5) on dmpnode tagmastore-usp0_2033,exec,cust_nbvx_daemons_ps,233568,,,,/usr/lib/vxvm/bin
    /vxattachd,,,,0,,
    PPST,-1438718982,2014-10-15 10:35:53.000 Z-0000,I,,P,fe6faf5e3dbe8e929b8bb4fee7f5fa28,,,,root,0,/bin/gawk,233570,,/bin/a
    wk {print $1},exec,cust_nbvx_daemons_ps,233568,,,,/usr/lib/vxvm/bin/vxattachd,,,,0,,
    PPST,-1438718981,2014-10-15 10:35:53.000 Z-0000,I,,P,fe6faf5e3dbe8e929b8bb4fee7f5fa28,,,,root,0,/usr/lib/vxvm/bin/vxatta
    chd,233571,,/bin/sh,create,cust_nbvx_daemons_ps,44397,,,,/usr/lib/vxvm/bin/vxattachd,,,,0,,
    PPST,-1438718980,2014-10-15 10:35:53.000 Z-0000,I,,P,fe6faf5e3dbe8e929b8bb4fee7f5fa28,,,,root,0,/usr/lib/vxvm/bin/vxatta
    chd,233572,,/bin/sh,create,cust_nbvx_daemons_ps,233571,,,,/usr/lib/vxvm/bin/vxattachd,,,,0,,
    PPST,-1438718979,2014-10-15 10:35:53.000 Z-0000,I,,P,fe6faf5e3dbe8e929b8bb4fee7f5fa28,,,,root,0,/bin/echo,233572,,/bin/e
    cho i/o error occurred (errno=0x5) on dmpnode tagmastore-usp0_2049,exec,cust_nbvx_daemons_ps,233571,,,,/usr/lib/vxvm/bin
    /vxattachd,,,,0,,
     

  • sdo's avatar
    sdo
    Moderator
    10 years ago
    I'm pretty sure that SCSP log retention is already set to one day. But I will double check and update. The TN that you supplied says logs accumulate when IPS is enabled. What is IPS, what is it's purpose, is it possible to disable it, is it sensible to disable it, how can it be disabled? Thanks.