After upgrade to Reporter 10.6.1.1 Reporter is keep creating dup000x.usage.log in processed accesslog save directory.
ftp> ls -all
200 PORT command successful. Consider using PASV.
150 Here comes the directory listing.
-rw-rw---- 1 ftp ftp 584 Feb 02 00:52 dup0001_usage.log
-rw-rw---- 1 ftp ftp 871 Feb 04 00:52 dup0002_usage.log
-rw-rw---- 1 ftp ftp 297 Feb 01 00:55 usage.log
226 Directory send OK.
ftp: 769 バイトが受信されました 0.13秒 6.06KB/秒。
How to stop to create this dup000x.usage.log file?
This behavior relate new function of Reporter it written as "Send Usage Data to Broadcom" in release note.
Reporter will be create/overtire usage.log in root(/) directory by daily.
And Reporter treat "*.log" and "*.gz" as accesslog according from setting.
Reporter try to process usage.log and into database as accesslog if ProxySG transfer accesslog to Reporter and save it on root(/) directory.
Reporter notify as error "Failed to find usable ELFF headers in log source file" in journal eventlog because the usage.log not create by accesslog format.
But to move file for done directory as post accesslog process are work correct, so Reporter continuously create usage.log and it move for done directory.
Reporter will be add "dupxxxx" in front of the file name when find same name in post accesslog directory(/done).
So you are see many "dupxxxx_usage.log"
This behavior will be occur if you save accesslog Reporter's root directory(/).
We suggest to create accesslog save directory such a "/accesslog".
This operation will bypass to create continuous "dupxxxx" files in post accesslog directory.