AG 3.1.4

AG is configured to send event to Sentinel RD 6.1
The lcache process was running fine so far, and today we noticed the
lcache process was stopped suddenly. And after some time (30 min) it
started back automatically.

So here i wanted to understand want Access Gateway is trying to do.

Below is the nproduct log



Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: All Channels
failed for [Novell Access Manager], LastError is being set
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: LCache process
seems slow, Moving into no-ACK mode
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: LCache could not
process event for the application Novell Access Manager. Reconnecting
LCache Again.
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: LCache could not
process, Going to restart/connect again
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: Attempting to
re-establish connection to secure log server for application Novell
Access Manager.
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: Processed event
[0] without Ack
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: Processed event
[1] without Ack
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: Server reports
logging protocol version: 4
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: Novell Access
Manager connecting to Log Server via SSL
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: Authentication
Successful
Tue Apr 30 09:16:56 2013 [Novell Audit Platform Agent]: Application
Novell Access Manager reconnected to Secure Logging Server,
10.10.124.140.
Tue Apr 30 09:16:57 2013 [Novell Audit Platform Agent]: Processed event
[2] without Ack
Tue Apr 30 09:16:57 2013 [Novell Audit Platform Agent]: Processed event
[3] without Ack
Tue Apr 30 09:16:57 2013 [Novell Audit Platform Agent]: Processed event
[4] without Ack
Tue Apr 30 09:16:57 2013 [Novell Audit Platform Agent]: Processed event
[5] without Ack
Tue Apr 30 09:16:57 2013 [Novell Audit Platform Agent]: Processed event
[6] without Ack
Tue Apr 30 09:16:57 2013 [Novell Audit Platform Agent]: Processed event
[7] without Ack
Tue Apr 30 09:16:57 2013 [Novell Audit Platform Agent]: Processed event
[8] without Ack
Tue Apr 30 09:16:58 2013 [Novell Audit Platform Agent]: Processed event
[9] without Ack
Tue Apr 30 09:17:00 2013 [Novell Audit Platform Agent]: Processed event
[10] without Ack
Tue Apr 30 09:17:00 2013 [Novell Audit Platform Agent]: Processed event
[11] without Ack

-------
--------------
-------------------
Tue Apr 30 09:17:32 2013 [Novell Audit Platform Agent]: Processed event
[99] without Ack
Tue Apr 30 09:17:32 2013 [Novell Audit Platform Agent]: Moving back to
regular mode after processing [100] events
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: Failing primary
connection for application Novell Access Manager.
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: Ack Not received
- Going to end the connection
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: Failing primary
connection for application Novell Access Manager.
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: ACK Failure for
AG\URL Access
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: Switching
application Novell Access Manager to cache.
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: LCache could not
process event for the application Novell Access Manager. Reconnecting
LCache Again.
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: Ack Not received
- Going to end the connection
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: LCache could not
process event for the application Novell Access Manager. Reconnecting
LCache Again.
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: ACK Failure for
AG\URL Access
Tue Apr 30 09:47:05 2013 [Novell Audit Platform Agent]: LCache could not
process, Going to restart/connect again
Tue Apr 30 09:47:06 2013 [Novell Audit Cache]: Log Cache Dir :
/var/opt/novell/naudit/cache
Tue Apr 30 09:47:08 2013 [Novell Audit Platform Agent]: Re-connecting to
LCache Process
Tue Apr 30 09:47:31 2013 [Novell Audit Cache]: Removed application
Novell Access Manager cache file
/var/opt/novell/naudit/cache/lcd5991099d5acaa151c37020228fb187e.
Tue Apr 30 09:47:31 2013 [Novell Audit Cache]: Removed application
Novell Access Manager cache file
/var/opt/novell/naudit/cache/lc54150a48aee694bd7813b4d17b774a6b.
Tue Apr 30 09:47:36 2013 [Novell Audit Platform Agent]: Attempting to
re-establish connection to secure log server for application Novell
Access Manager.
Tue Apr 30 09:47:36 2013 [Novell Audit Platform Agent]: Server reports
logging protocol version: 4
Tue Apr 30 09:47:36 2013 [Novell Audit Platform Agent]: Novell Access
Manager connecting to Log Server via SSL
Tue Apr 30 09:47:36 2013 [Novell Audit Platform Agent]: Authentication
Successful



As you can see from the log it stopped responding at 09:17 and started
back at 9:47.

Can anyone help me understand what this lcache is doing here.?


--
lvaradha
------------------------------------------------------------------------
lvaradha's Profile: https://forums.netiq.com/member.php?userid=226
View this thread: https://forums.netiq.com/showthread.php?t=47659