Solved: Problems with RME Syslog (LMS 3.1 with W2003)

g.palavecino · ‎10-22-2009

Hello, I'm Guilliano and have problems with the operation of syslogcollector and sysloganalysis. The current situation is:

* Unsubscribe the host that was active and I can not subscribe to another host because I get the error: SLCA0152 and SLCA0126. I followed the steps in the User Guide 4.2, and Instalation Guide RME LMS 3.1 and I can not solve the problem. I try to create the certificate that indicates the error in the Commun Services, but does not believe it.

* In windows critical messages appears: DCR is down or inaccessible.

In advance, thank you very much.

Sincerely,

Guilliano Palavecino R.

Support Engineer

Adexus S.A

Joe Clarke · ‎10-22-2009

Post the output of the pdshow command as well as the output of "netstat -a -n -o -b".

View solution in original post

Joe Clarke · ‎10-22-2009

Post the output of the pdshow command as well as the output of "netstat -a -n -o -b".

g.palavecino · ‎10-23-2009

Hi jclarke, Here is the file pdshow and netstat.

Joe Clarke · ‎10-23-2009

It appears some daemons were stopped and started manually, and this has left LMS in a bad state. Restart Daemon Manager, and if the problems persist, post the new pdshow and netstat output before trying to do any daemon changes.

g.palavecino · ‎10-27-2009

JClarke, I realize what that says. also restart the server. the problem persists and I can not subscribe to the syslog server tools from RME.

Deputy pdshow file and netstat.

g.palavecino · ‎10-28-2009

Hi, the problem persists. Who can help?

Joe Clarke · ‎10-28-2009

It appears SyslogCollector is not initializing properly. This typically means there is a problem reading the syslog.log file. Post the SyslogCollector.log.

g.palavecino · ‎10-28-2009

thanks. here is the file.

Joe Clarke · ‎10-28-2009

Post the C:/PROGRA~1/CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties file.

g.palavecino · ‎10-28-2009

here is the file (2).

Joe Clarke · ‎10-28-2009

Shutdown SyslogCollector and SyslogAnalyzer:

pdterm SyslogCollector SyslogAnalyzer

Then delete NMSROOT/MDC/tomcat/webapps/rme/WEB-INF/classes/com/cisco/nm/rmeng/csc/data/Subscribers.dat,

NMSROOT/MDC/tomcat/webapps/rme/WEB-INF/classes/com/cisco/nm/rmeng/sa/data/collectors.dat, and empty out the contents of NMSROOT/MDC/tomcat/webapps/rme/WEB-INF/classes/com/cisco/nm/rmeng/csc/data/filters.dat. Then restart the daemons:

pdexec SyslogCollector SyslogAnalyzer

See if syslog works again.

g.palavecino · ‎10-28-2009

ok. I now see that the server has been subscribed, but it is in state NA.

g.palavecino · ‎10-29-2009

UP......

ok. I now see that the server has been subscribed, but it is in state NA.

Joe Clarke · ‎10-29-2009

Post the new SyslogCollector.log.

g.palavecino · ‎10-30-2009

ok. thanks.