Reporter is keep creating ”dup000x_usage.log”.

book

Article ID: 208759

calendar_today

Updated On:

Products

Reporter-S500 Reporter-VA

Issue/Introduction

After upgrade to Reporter 10.6.1.1 Reporter is keep creating dup000x.usage.log in processed accesslog save directory.

===========================================================================
ftp> ls -all
200 PORT command successful. Consider using PASV.
150 Here comes the directory listing.
-rw-rw----    1 ftp      ftp           584 Feb 02 00:52 dup0001_usage.log
-rw-rw----    1 ftp      ftp           871 Feb 04 00:52 dup0002_usage.log
-rw-rw----    1 ftp      ftp           297 Feb 01 00:55 usage.log
226 Directory send OK.
ftp: 769 バイトが受信されました 0.13秒 6.06KB/秒。
ftp>
===========================================================================

How to stop to create this dup000x.usage.log file?

Environment

Release :Reporter10.6.1.1

  • ProxySG is transferring accesslog for Reporter via Reporter FTP service and saving accesslog on root(/) directory.
  • Reporter move accesslog for post accesslog directory(/done) when finish to process accesslog.

Resolution

This behavior relate new function of Reporter it written as "Send Usage Data to Broadcom" in release note.

Reporter will be create/overtire usage.log in root(/) directory by daily.
And Reporter treat "*.log" and "*.gz" as accesslog according from setting.


Reporter try to process usage.log and into database as accesslog if ProxySG transfer accesslog to Reporter and save it on root(/) directory. 
Reporter notify as error "Failed to find usable ELFF headers in log source file" in journal eventlog because the usage.log not create by accesslog format.

But to move file for done directory as post accesslog process are work correct, so Reporter continuously create usage.log and it move for done directory.
Reporter will be add "dupxxxx" in front of the file name when find  same name in post accesslog directory(/done).
So you are see many "dupxxxx_usage.log"

This behavior will be occur if you save accesslog Reporter's root directory(/).

We suggest to create accesslog save directory such a "/accesslog".
This operation will bypass to create continuous "dupxxxx" files in post accesslog directory.

/
|--accesslog
|      |--SG_main__XXXXXXXXXXXX.log
|      |--SG_main__XXXXXXXXXXXY.log
|      |--done
|          |--SG_main__XXXXXXXXXXXX.log
|
|--usage.log

Attachments