cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1380
Views
0
Helpful
5
Replies

LMS 3.2 Dropping the syslog as queue is full

orsonjoon
Level 1
Level 1

Hello,

I got this message in the SyslogCollector.log file:

SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000
SyslogCollector - [Thread: EvaluatorThread-0] INFO , 10 Nov 2009 09:11:14,344, Anonymous Dropping the syslog as queue is full 100000

etc.

I did find a similar issue on the forum, but this wasn't really answered here, does anyone now what this is? A limitation of the collector or bug and how to resolve this?

At this moment no syslog messages are collected and nothing shows in the syslog report.

Thanks in advance...

5 Replies 5

Disc01079
Level 1
Level 1

Hi,

My gues is that your Syslog collector lost its connection with RME and can no longer buffer its messages, which it does when there is no connection. Try restarting the syslog analyzer or RME. Check at RME > Tools > Syslog > Syslog Collector Status if messages are being forwarded. Cheers,

Dick Hogeweg

Hi, thanks for the response.

The first thing I did was restarting RME and completely Ciscoworks.

Test Collector Subscription Status
SSL certificate status SSL certificates are valid and properly imported
Collector status Collector ciscoworks is up and reachable.


Collector Status
Refresh Syslog Collector Status
Showing 1 records
  Name Forwarded Invalid Filtered Dropped Received Up Time Update Time
1.ciscoworks1103620560964011043211Jan 7 2009 11:53:29 Central European Time(GMT +01:00:00)Jan 7 2010 12:51:33 Central European Time(GMT +01:00:00)

Everyting looks fine, but no messages appear in a syslog report.

Any ideas?

Hi, did you configure log file rotation and do you some housekeeping on your log files (CS > Server > Admin > Log rotation)? Is there enough space on your disk were your syslog.log file resides?

ppflaum12
Level 1
Level 1

Did you ever get this fixed? ... I am having the same issue.

Hello,

The solution was a combination of fine tuning log rotation, resizing hard drives, updating device packages and bugfixes.

Cheers.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: