Highlighted
Absent Member.
Absent Member.
6816 views

ArcSight Logger Process Fails To Start

Jump to solution

I bounced my Logger the other day (no changes made to system); when it came back up (and it appears to have done so) all the accounts were locked out of the web interface. Logging into the CLI shows that everything seems to be running as expected except one of the processes failed to start.

/opt/local/monit/bin/monit summary

The Monit daemon 5.1.1 uptime: 7h 6m

Process 'postgresql'                running

File 'arcsight_primary_storage_available' accessible

Process 'mysqld'                    running

Process 'servers'                   running

Process 'receivers'                 running

Process 'processors'                running

Process 'web'                       running

Process 'reportengine'              running

File 'arcsight_server_ready'        accessible

Process 'insp'                      Execution failed

Process 'apache'                    running

Process 'connector'                 running

Process 'aps'                       running

System 'MyArcsightServer'  running

I have tried to restart the "insp" process with:

/opt/local/monit/bin/monit stop insp

/opt/local/monit/bin/monit start insp

And it shows the expected messages; process not monitored - stop pending, process not monitored, process not monitored - start pending, and process initializing. Followed, unfortunately, by process execution failed.

I looked through all the logs on the system and found nothing even remotely mentioning "insp" or anything about a process failing to load.


Anyone come across this before or know how I could proceed?


Thanks in advance

Labels (2)
0 Likes
14 Replies
Highlighted
Absent Member.
Absent Member.

We face same issue for logger, I have checked logger external storage is full.

I have delete old file from path /opt/data/logger and then i restart monit.

Its works for me

[root@pravinlogger1 logger]# df -h

Filesystem            Size  Used Avail Use% Mounted on

/dev/sda3              99G   33G   61G  36% /

/dev/sda2              99M   31M   64M  33% /boot

none                  3.9G     0  3.9G   0% /dev/shm

/dev/sdb1             3.6T  3.6T   22m 100% /opt/data

[root@pravinlogger1 logger]#


0 Likes
Highlighted
Absent Member.
Absent Member.

Hello Hemant,

We have recently installed L7500 Logger and are facing the same issue. The ArcSight Logger Admin Guide v5.3 states the below instruction, however, I don't see any such message when I try to reboot. Could you please tell me how you performed the factory reset? :

Once the following message appears on the screen, press any key on your keyboard.

This message is displayed for a very short time, therefore, make sure you press a key

on your keyboard quickly; otherwise, the Logger will continue to boot normally.

Press any key to enter the menu

Booting Red Hat Enterprise Linux Server in 2 seconds...

0 Likes
Highlighted
Absent Member.
Absent Member.

Hi Vaishnavi,

When you get below message at the time of reboot

"Press any key to enter the menu

Booting Red Hat Enterprise Linux Server in 2 seconds..."

press any key, you will enter the setup. First thing you have to do is select the drive and then select to verify it. Once you verify it again select the drive and restore it.

Thats it. Once done. just reboot it and you are good to go. 🙂

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.