SMS log server not available

[Moudar]

Hi,

When trying to show logs i get this:

Running the command: "tail -f $RTDIR/log_indexer/log/log_indexer.elg"

Start reading 127.0.0.1:fw.log [1737620761] at position 7 to position 7
[3808426816][23 Jan 11:48:00] Finished reading part of 127.0.0.1:fw.log [1737620761]
[4032822080][23 Jan 11:48:00] JavaBinCodec::unmarshall Invalid version (expected , but <) or the data in not in 'javabin' format
[4032822080][23 Jan 11:48:00] SolrClient::Implementation::ParseJavaBinReply Bad Java bin format
[4032822080][23 Jan 11:48:00] RFLIndexDoer::sendToSolr: Send error occurred(0,0). Tried 1 out of max 3
[4032822080][23 Jan 11:48:00] JavaBinCodec::unmarshall Invalid version (expected , but <) or the data in not in 'javabin' format
[4032822080][23 Jan 11:48:00] SolrClient::Implementation::ParseJavaBinReply Bad Java bin format
[4032822080][23 Jan 11:48:00] RFLIndexDoer::sendToSolr: Send error occurred(0,0). Tried 2 out of max 3
[4032822080][23 Jan 11:48:00] JavaBinCodec::unmarshall Invalid version (expected , but <) or the data in not in 'javabin' format
[4032822080][23 Jan 11:48:00] SolrClient::Implementation::ParseJavaBinReply Bad Java bin format
[4032822080][23 Jan 11:48:00] RFLIndexDoer::sendToSolr: Send error occurred(0,0). Tried 3 out of max 3
[4032822080][23 Jan 11:48:00] RFLIndexDoer::Process: failed to send full log buffer, sending single logs.
[3808426816][23 Jan 11:48:00] LogFetcher::CreateSessions - 127.0.0.1:fw.log [1737620761]
[3808426816][23 Jan 11:48:00] 127.0.0.1:fw.log [1737620761] create session for [7-7]

Any idea!

[PhoneBoy]

What version/JHF level?
I suspect TAC may need to be involved here.

[PhoneBoy]

You might also look at number 7 here: https://support.checkpoint.com/results/sk/sk163260 

[AkosBakos]

Hi @Moudar 

Have a look at on this: https://support.checkpoint.com/results/sk/sk169736

Is there any dump file under here: /var/log/dump/usermode/

Akos

[the_rock]

I have TAC case with customer about this at the moment, we are waiting for senior engineer to provide an update based on the logs.

Its R81.20 jumbo 92

Andy

[AkosBakos]

Andy,

We are facing with this:

PRJ-58518, PMTR-110408

the fix is in take 96

a

[the_rock]

Good to know! Customer told me TAC ran some sort of script that fixed the issue.

Andy

[ITTech]

Hi The_rock

I've the same issue, could you give me the script, please?

Thanks!!

[the_rock]

I have after hours maintenance window with him tonight, so will ask, for sure. All he told me was they ran some kind of script that deleted an empty file that was related to the issue, but thats all the info I have, sorry : - (

Andy

[the_rock]

Sorry for the delayed response. I just finished maintenance window with a customer and asked him about it. He said what TAC senior guy ended up doing was run cpmdoc script and it gave him a clue what to do at the end of the file (it generates one when it finishes running)

To do it, you do this:

cd $FWDIR/scripts

./runcpm_doc.sh

I believe thats the exact name, but you can double check.

Hope that helps.

Andy

[ITTech]

Hi The:rock

Thank you o much for your help, today I'm going to run the script and I will check .

BR

[the_rock]

K, sounds good, let us know it if helps.

Andy