Highlighted
New Member.
1060 views

WOS chunk save errors in logger_server.log

Hi,

I'm seeing the following errors in my logger_server.log (ESM65 SP1).

logger_server.log:[2015-07-31 07:50:28,050][ERROR][l][pool-2-thread-3] Can not save a WOS chunk, dropping a WOS chunk save request

logger_server.log:[2015-07-31 07:50:28,158][ERROR][l][pool-2-thread-4] Can not save a WOS chunk, dropping a WOS chunk save request

logger_server.log:[2015-07-31 07:50:28,428][ERROR][l][pool-2-thread-1] Can not save a WOS chunk, dropping a WOS chunk save request

logger_server.log:[2015-07-31 07:52:31,301][ERROR][InternalCEFEventSender][Thread-37] dropped 1560 events, nowhere to send it

What is the significance of these errors?

Should I be worried that I am losing logs?

thanks,

-TK

Labels (2)
0 Likes
15 Replies
Highlighted
Absent Member.
Absent Member.

hey guys,

looks like Im having the same issue in ESM 6.8c

anyone know anything about this one?

any help or guidance is much appreciated!

[2015-10-13 10:52:35,858][ERROR][InternalCEFEventSender][Thread-46] dropped 660 events, nowhere to send it

[2015-10-13 10:52:50,302][WARN ][Search3gMgr][pool-6-thread-3] cant find event searcher

[2015-10-13 10:52:50,345][WARN ][Search3gMgr][pool-6-thread-2] cant find event searcher

[2015-10-13 10:52:50,665][WARN ][Search3gMgr][pool-6-thread-1] cant find event searcher

[2015-10-13 10:52:50,707][WARN ][Search3gMgr][pool-6-thread-4] cant find event searcher

[2015-10-13 10:52:51,070][WARN ][Search3gMgr][pool-6-thread-2] cant find event searcher

[2015-10-13 10:52:51,113][WARN ][Search3gMgr][pool-6-thread-1] cant find event searcher

[2015-10-13 10:53:08,298][WARN ][Search3gMgr][pool-6-thread-3] cant find event searcher

[2015-10-13 10:53:08,341][WARN ][Search3gMgr][pool-6-thread-2] cant find event searcher

[2015-10-13 10:53:50,345][WARN ][Search3gMgr][pool-6-thread-1] cant find event searcher

[2015-10-13 10:53:50,387][WARN ][Search3gMgr][pool-6-thread-4] cant find event searcher

[2015-10-13 10:53:50,715][WARN ][Search3gMgr][pool-6-thread-3] cant find event searcher

[2015-10-13 10:53:50,757][WARN ][Search3gMgr][pool-6-thread-2] cant find event searcher

[2015-10-13 10:54:50,432][WARN ][Search3gMgr][pool-6-thread-4] cant find event searcher

[2015-10-13 10:54:50,476][WARN ][Search3gMgr][pool-6-thread-3] cant find event searcher

[2015-10-13 10:55:02,413][WARN ][Search3gMgr][pool-6-thread-1] cant find event searcher

[2015-10-13 10:55:02,454][WARN ][Search3gMgr][pool-6-thread-4] cant find event searcher

[2015-10-13 10:55:13,001][ERROR][l][pool-2-thread-4] Can not save a WOS chunk, dropping a WOS chunk save request

[2015-10-13 10:55:28,928][ERROR][l][pool-2-thread-1] Can not save a WOS chunk, dropping a WOS chunk save request

[2015-10-13 10:55:35,383][ERROR][l][pool-2-thread-2] Can not save a WOS chunk, dropping a WOS chunk save request

0 Likes
Highlighted
Absent Member.
Absent Member.

Hi ,

Have you got the answer why these error messages came

0 Likes
Highlighted
Regular Contributor.. Regular Contributor..
Regular Contributor..

We are also seeing these messages in the logger_server.log and are missing archived events !!

Can anyone help with these error messages?

0 Likes
Highlighted
Absent Member.
Absent Member.

I havent heard a thing on this ..

someone please HELP!

0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Please consider logging a request for Support to the Support Desk.

That is the team staffed and trained to respond to requests for assistance such as this, and there are escalation paths available.

Anything here on Protect 724 is a community effort, and trying to escalate here doesn't work that well.

I personally am not familiar with those log error messages.

0 Likes
Highlighted
Absent Member.
Absent Member.

I am seeing same issue in our environment.  Any updates?

- Brandon

0 Likes
Highlighted
Absent Member.
Absent Member.

well, ive upgraded since then and am no longer seeing the problem...

I wish I had better news for you..

0 Likes
Highlighted
Honored Contributor.. Honored Contributor..
Honored Contributor..

So did 6.8cp2 fix the issue for you?  We see the "cant find event searcher" in p2 as well so wasnt sure if that message is a red herring or not?

0 Likes
Highlighted
New Member.

This is a bug, according to Arcsight support it supposed to be fixed on next release. 

0 Likes
Highlighted
Regular Contributor.. Regular Contributor..
Regular Contributor..

thanks for the information. Do you meant his is fixed in 6.9?

0 Likes
Highlighted
New Member.

They say on next release so ESM 6.9.   Case still pending.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.