Highlighted
Super Contributor.. tony.zhang Super Contributor..
Super Contributor..
569 views

Notification Registry Message Buffer Size Limit Causing Notification to Break?

Jump to solution

Hello,

We've been suffering from a notification issue for a while now (see this post https://protect724.hp.com/message/52841#52841)

In one of the tests we had, we disabled all of the notification rules, set max limit to 1000/day, turned on 1 rule that's triggering exactly every minute and restarted the server. It sent only 12 notification emails and just died after.

Here is something new we discovered that might be related to this; in one of the config files [CreateSystemTables.sql], we noticed that for this entry:

-- -------------------------------------------------------------------------------;
-- -- Create the table arc_notification_registry.;
-- -------------------------------------------------------------------------------;
CREATE TABLE arc_notification_registry
(
    notification_id                 VARCHAR(40)    NOT NULL,
    alert_id                        BIGINT(20),
    group_name                      VARCHAR(50),
    extra_info                      VARCHAR(250),
   message                         VARCHAR(1000),
    event_name                      VARCHAR(512),
    arcsight_severity               VARCHAR(15),
    create_time                     DATETIME(3)
)

TABLESPACE ARC_SYSTEM_DATA
ENGINE=INNODB CHARSET='utf8' collate='utf8_bin'
;

--------------------------------------------------------------------------------------------------------------------------------

The message only has a size of VARCHAR(1000). The default informative.vm is parsing out every single non-empty field and appends to the message, so the size would most likely exceed the limit (in fact the email we got seems to be cut off in midway). I'm not very familiar with SQL, but this sort of overflowing would definitely cause some troubles in C etc. Is there anyway to increase this limit safely? or should we just shrink the message body? or is this just completely unrelated?

Also during another test we did (we used the same setup), it sent 88 notifications and died. and then on the next day, we saw an event saying "1007 notifications purged". We were sure that we disabled everything else when testing this. So, is there anything else (such as internal notifications) that are also considered as "notifications" and is sharing the max notification limit?

 

Any help or any thoughts would be really appreciated!

0 Likes
1 Solution

Accepted Solutions
Super Contributor.. tony.zhang Super Contributor..
Super Contributor..

Re: Notification Registry Message Buffer Size Limit Causing Notification to Break?

Jump to solution

Notification working now; Refer to

Hope it helps.

View solution in original post

0 Likes
2 Replies
Super Contributor.. tony.zhang Super Contributor..
Super Contributor..

Re: Notification Registry Message Buffer Size Limit Causing Notification to Break?

Jump to solution

Seems like the message field is actually used to contain the subject of the email, and Email itself is not stored in SQL database.

During a recent test we noticed that the notification stopped working with the following logs:

---------------------------------------------------------------------------------------------------------------------------------

[default.com.arcsight.notification.j] Notification counts changed for account_1

[default.com.arcsight.notification.NotifierBase$QueueProcessor ] Registering 1 notifications.

[default.com.arcsight.notification.j] XXX has 1 notifications

[default.com.arcsight.notification.j] Notification counts changed for account_1

[default.com.arcsight.notification.NotifierBase$QueueProcessor ] Registering 1 notifications.

[default.com.arcsight.notification.j] XXX has 2 notifications

[default.com.arcsight.notification.j] Notification counts changed for account_1

[default.com.arcsight.notification.NotifierBase$QueueProcessor ] Registering 1 notifications.

[default.com.arcsight.notification.j] XXX has 3 notifications

[default.com.arcsight.notification.j] Notification counts changed for account_2

-----------------------------------------------------------------------------------------------------------------------

so after this "notification counts changed" to another account, it never changed back, and the notification stopped working. (at that moment we did open a console to log in as account_2) Would this possibly be the reason causing notifications to stop working?

0 Likes
Super Contributor.. tony.zhang Super Contributor..
Super Contributor..

Re: Notification Registry Message Buffer Size Limit Causing Notification to Break?

Jump to solution

Notification working now; Refer to

Hope it helps.

View solution in original post

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.