Hi there!

SLES 11 SP1 x64
eDirectory 8.8.5 (with no patches)
AUDTedirinst 8.8.5-12
IDM 3.6.1
RBPM 3.7 (patch D applied just in jBoss, no manual steps)
Platform Agent 2.0.2-68
SLM 1.2.0.1_938

First of all my apologies about environment out of compliance, it was
already installed before I begin and I will upgrade to 4 AE in a couple
of months.

After a while just the audit for DirXML is dropping, eDirectory still
logging but IDM and User APP no. They events do not go to the cache.

If I restart auditds module and user app logging, they work fine for a
while.

This is the logevent.conf

Code:
--------------------

LogHost=10.40.50.47
JLogCacheDir=/opt/novell/idm/jcache
JLogCachePort=1287
LogCachePort=1288
LogJavaClassPath=/opt/novell/idm/NAuditPA.jar
LogMaxBigData=8192
LogEnginePort=1290
LogCacheUnload=no
LogCacheSecure=no
LogMaxCacheSize=10240
LogCacheLimitAction=keep logging
LogCacheDir=/opt/novell/idm/logCache
LogReconnectInterval=60
--------------------


The npoduct.log:

Code:
--------------------

Fri May 10 14:48:01 2013 [SLSConnection.authenticate()]: [INFO] SLS reports logging protocol version (4)
Fri May 10 17:40:46 2013 [Novell Audit Platform Agent]: Failing primary connection for application DirXML.
Fri May 10 17:40:46 2013 [Novell Audit Platform Agent]: Failing primary connection for application DirXML.
Fri May 10 17:40:46 2013 [Novell Audit Platform Agent]: ACK Failure for \dxevent
Fri May 10 17:40:46 2013 [Novell Audit Platform Agent]: Switching application DirXML to cache.
Fri May 10 17:40:46 2013 [Novell Audit Platform Agent]: LCache could not process event for the application DirXML. Reconnecting LCache Again.
Fri May 10 17:40:46 2013 [Novell Audit Platform Agent]: LCache could not process event for the application DirXML. Reconnecting LCache Again.
Fri May 10 17:40:46 2013 [Novell Audit Platform Agent]: ACK Failure for \dxevent
Fri May 10 17:42:10 2013 [Novell Audit Cache]: Removed application DirXML cache file /opt/novell/idm/logCache/lc6e1df4c4669e492c9b5006d591f5fab1.
Fri May 10 17:49:57 2013 [Novell Audit Platform Agent]: LCache could not process event for the application DirXML. Reconnecting LCache Again.
Fri May 10 17:49:57 2013 [Novell Audit Platform Agent]: LCache could not process event for the application DirXML. Reconnecting LCache Again.
Fri May 10 17:49:57 2013 [Novell Audit Platform Agent]: ACK Failure for \dxevent
Fri May 10 17:49:57 2013 [Novell Audit Platform Agent]: Attempting to re-establish connection to secure log server for application DirXML.
Fri May 10 17:49:57 2013 [Novell Audit Platform Agent]: Server reports logging protocol version: 4
Fri May 10 17:49:57 2013 [Novell Audit Platform Agent]: DirXML connecting to Log Server via SSL
Fri May 10 17:49:57 2013 [Novell Audit Platform Agent]: Authentication Successful
Fri May 10 17:49:57 2013 [Novell Audit Platform Agent]: Application DirXML reconnected to Secure Logging Server, 10.40.50.47.
Fri May 10 17:51:20 2013 [Novell Audit Cache]: Removed application DirXML cache file /opt/novell/idm/logCache/lc6e1df4c4669e492c9b5006d591f5fab1.
Fri May 10 18:01:00 2013 [jlogevent]: Switching application DirXML to cache.
Fri May 10 18:01:00 2013 [jlogevent]: Exception while preparing cache: Connection reset
Fri May 10 18:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Fri May 10 18:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.
Fri May 10 19:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Fri May 10 19:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.
Fri May 10 20:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Fri May 10 20:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.
Fri May 10 21:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Fri May 10 21:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.
Fri May 10 22:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Fri May 10 22:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.
Fri May 10 23:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Fri May 10 23:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.
Sat May 11 00:01:00 2013 [jlogevent]: Exception while preparing cache: Connection reset
Sat May 11 00:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Sat May 11 00:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.
Sat May 11 01:01:00 2013 [jlogevent]: Exception while preparing cache: Broken pipe
Sat May 11 01:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Sat May 11 01:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.
Sat May 11 02:01:00 2013 [jlogevent]: Failed to connect to cache for application %s, DISABLING cache mode.
Sat May 11 02:01:00 2013 [jlogevent]: All log channels have failed. Stopping logging of events for application DirXML.

--------------------




In User APP I just have this

Code:
--------------------

2013-05-10 14:48:01,488 INFO [STDOUT] (http-0.0.0.0-8081-18) Initializing Novell Audit...

--------------------

And this

Code:
--------------------

INFO [STDOUT] (http-0.0.0.0-8081-18) Logging to Novell Audit failed

--------------------


Is possible to do something to keep logging before the upgrade?


--
agorian
------------------------------------------------------------------------
agorian's Profile: https://forums.netiq.com/member.php?userid=1099
View this thread: https://forums.netiq.com/showthread.php?t=47741