Highlighted
asen.zhang Absent Member.
Absent Member.
423 views

Connector could not be processed (max retries exceeded) moving to folder [bad]

I have installed a multifolder type (version Conector 6.0.4), Oracle's Alert.log then read the file (the log without rotation has been on this one log file). Installed a total of six, but this morning found a log to be moved to a directory called bad. I do not know why. 6 sets of database installation is the same, the system is RHEL 6.4.

Agent.properties set in startatend = true agents [x]. Followexternalrotation = false (this is not set to true because it would have no rotation)

Please list scene what will happen this error.

How can i set connector options to dont move any target log file when the connector could not be processed file.

Please help analyze. Thank you.

Specific problems following time:

[2014-05-08 19:39:17,347][INFO ][default.com.arcsight.agent.u.j$a_$b_][<init>] New ThreadLocalWorker [ThreadLocalWorker #0 for Post-Aggregation Batching[3BxiZ20UBABCAA6VK1BgUzg==]] created by thread [ThreadLocalWorker #0 for Main Flow Batching[3BxiZ20UBABCAA6VK1BgUzg==]]

[2014-05-08 19:39:18,348][INFO ][default.com.arcsight.agent.util.i][run] 0 files processed

[2014-05-08 19:39:19,325][INFO ][default.com.arcsight.agent.loadable._TrafficController][run] Traffic controller cache terminated.

[2014-05-08 19:39:19,349][INFO ][default.com.arcsight.agent.loadable._DeviceEventCounter][processSingleAlert] New device found [tpixxzc2|10.12.20.95|ArcSight|ArcSight]. Starting counters.

[2014-05-08 19:39:23,114][WARN ][default.com.arcsight.common.config.AgentPropertiesFileConfiguration][getBaseAgent] No ID and no Connectors configured

[2014-05-08 19:39:23,114][WARN ][default.com.arcsight.agent.qe.f][getFCPVersionSubFolder] Could not identify connector from agent id [null]. Will use the default value [0] of the parameter [fcp.version] to load FCP content.

[2014-05-08 19:39:23,118][INFO ][default.com.arcsight.agent.qe.f][getInputStream] Resource [cef_syslog/cef_syslog.sdkkeyvaluefilereader.properties] found in [/opt/arcsight/log_multifolder/current/system/agent/fcp/arcsightagents.aup|cef_syslog/cef_syslog.sdkkeyvaluefilereader.properties.arc]

[2014-05-08 19:39:23,119][INFO ][default.com.arcsight.common.config.AgentPropertiesFileConfiguration][loadDefaultProperties] customInitialization() - read default properties from [cef_syslog/cef_syslog.sdkkeyvaluefilereader.properties].

[2014-05-08 19:39:23,120][INFO ][default.com.arcsight.agent.qe.f][getInputStream] Resource [cef_syslog/cef_syslog.sdkkeyvaluefilereader.properties] not found (AUP file ignored)

[2014-05-08 19:39:23,143][INFO ][default.com.arcsight.agent.qc.d$a_][init] Succesfully Parsed properties from file [cef_syslog/cef_syslog]

[2014-05-08 19:39:23,415][INFO ][default.com.arcsight.agent.util.i][processFile] Processing file [/u01/app/oracle/diag/rdbms/tpixxzc/tpixxzc2/trace/alert_tpixxzc2.log]

[2014-05-08 19:39:23,416][INFO ][default.com.arcsight.agent.ki][fileStarted] Started processing file [alert_tpixxzc2.log]

[2014-05-08 19:39:23,416][ERROR][default.com.arcsight.util.AgentUtil][getGenericParser] Unsupported parser type[-1] for this method

[2014-05-08 19:39:23,418][INFO ][default.com.arcsight.agent.u.qb$b_][getInputStream] Resource [arcsight/arcsight.link.csv] not found in any of the usual places

[2014-05-08 19:39:23,418][INFO ][default.com.arcsight.agent.u.qb$b_][getInputStream] Resource [arcsight/arcsight.csv] not found in any of the usual places

[2014-05-08 19:39:23,422][FATAL][default.com.arcsight.agent.util.i][processFile]

java.lang.NullPointerException

                at com.arcsight.agent.baseagents.k.a.a.<init>(a.java:129)

                at com.arcsight.agent.baseagents.i.b.a(b.java:158)

                at com.arcsight.agent.baseagents.i.b.b(b.java:104)

                at com.arcsight.agent.util.i.a(i.java:456)

                at com.arcsight.agent.util.i.a(i.java:380)

                at com.arcsight.agent.util.i.d(i.java:321)

                at com.arcsight.agent.util.i.run(i.java:266)

                at java.lang.Thread.run(Thread.java:662)

[2014-05-08 19:39:23,422][ERROR][default.com.arcsight.agent.util.i][processFile] Failed to process file [/u01/app/oracle/diag/rdbms/tpixxzc/tpixxzc2/trace/alert_tpixxzc2.log]

[2014-05-08 19:39:23,422][WARN ][default.com.arcsight.agent.util.i][processFile] File [/u01/app/oracle/diag/rdbms/tpixxzc/tpixxzc2/trace/alert_tpixxzc2.log] could not be processed (max retries exceeded) moving to folder [bad].

[2014-05-08 19:39:23,430][INFO ][default.com.arcsight.agent.util.i][processFile] Copied [/u01/app/oracle/diag/rdbms/tpixxzc/tpixxzc2/trace/alert_tpixxzc2.log] to [/u01/app/oracle/diag/rdbms/tpixxzc/tpixxzc2/trace/bad/alert_tpixxzc2.log]

[2014-05-08 19:39:23,432][INFO ][default.com.arcsight.agent.util.i][run] 0 files processed

[2014-05-08 19:39:28,441][INFO ][default.com.arcsight.agent.util.i][run] 0 files processed

[2014-05-08 19:39:33,451][INFO ][default.com.arcsight.agent.util.i][run] 0 files processed

[2014-05-08 19:39:38,459][INFO ][default.com.arcsight.agent.util.i][run] 0 files processed

[2014-05-08 19:39:43,077][INFO ][default.com.arcsight.util.AgentUtil][logfuLog] WatchDog[WDP[loggersecure-3BxiZ20UBABCAA6VK1BgUzg==][10.0.30.60][443]]: {IT[loggersecure-3BxiZ20UBABCAA6VK1BgUzg==][10.0.30.60][443].lastCheckpointTime=1399549168584}

Best Regards

0 Likes
Reply
1 Reply
Super Contributor.. sahaya Super Contributor..
Super Contributor..

Re: Connector could not be processed (max retries exceeded) moving to folder [bad]

Hi,

Can you please share some sample log and your parser file.

You Need to look into the below error log also "Unsupported parser type[-1] for this method"

Thanks,
Sahaya

0 Likes
Reply
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.