I bounced my Logger the other day (no changes made to system); when it came back up (and it appears to have done so) all the accounts were locked out of the web interface. Logging into the CLI shows that everything seems to be running as expected except one of the processes failed to start.
The Monit daemon 5.1.1 uptime: 7h 6m
Process 'postgresql' running
File 'arcsight_primary_storage_available' accessible
Process 'mysqld' running
Process 'servers' running
Process 'receivers' running
Process 'processors' running
Process 'web' running
Process 'reportengine' running
File 'arcsight_server_ready' accessible
Process 'insp' Execution failed
Process 'apache' running
Process 'connector' running
Process 'aps' running
System 'MyArcsightServer' running
I have tried to restart the "insp" process with:
/opt/local/monit/bin/monit stop insp
/opt/local/monit/bin/monit start insp
And it shows the expected messages; process not monitored - stop pending, process not monitored, process not monitored - start pending, and process initializing. Followed, unfortunately, by process execution failed.
I looked through all the logs on the system and found nothing even remotely mentioning "insp" or anything about a process failing to load.
Anyone come across this before or know how I could proceed?
Thanks in advance
We face same issue for logger, I have checked logger external storage is full.
I have delete old file from path /opt/data/logger and then i restart monit.
Its works for me
[root@pravinlogger1 logger]# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/sda3 99G 33G 61G 36% /
/dev/sda2 99M 31M 64M 33% /boot
none 3.9G 0 3.9G 0% /dev/shm
/dev/sdb1 3.6T 3.6T 22m 100% /opt/data
We have recently installed L7500 Logger and are facing the same issue. The ArcSight Logger Admin Guide v5.3 states the below instruction, however, I don't see any such message when I try to reboot. Could you please tell me how you performed the factory reset? :
Once the following message appears on the screen, press any key on your keyboard.
This message is displayed for a very short time, therefore, make sure you press a key
on your keyboard quickly; otherwise, the Logger will continue to boot normally.
Press any key to enter the menu
Booting Red Hat Enterprise Linux Server in 2 seconds...
When you get below message at the time of reboot
"Press any key to enter the menu
Booting Red Hat Enterprise Linux Server in 2 seconds..."
press any key, you will enter the setup. First thing you have to do is select the drive and then select to verify it. Once you verify it again select the drive and restore it.
Thats it. Once done. just reboot it and you are good to go. 🙂