solera-gaugefs.service stopped

Products

• Security Analytics

Issue/Introduction

The solera-gaugefs service stopped for some reason.  The service was restarted automatically.  When looking at /var/log/messages we see this error:

2021-12-28T07:46:20+00:00 server gaugefs[76021]: ABRT — begin stack —
2021-12-28T07:46:20+00:00 server gaugefs[76021]: ABRT frame 00: /usr/sbin/gaugefs(_ZN2sa3sys8crashlog9on_signalEiP9siginfo_tPv+0x14b) [0x5d309b]
2021-12-28T07:46:20+00:00 server gaugefs[76021]: ABRT frame 01: /lib64/libpthread.so.0(+0xf5d0) [0x7ffff77455d0]
2021-12-28T07:46:20+00:00 server gaugefs[76021]: ABRT frame 02: /lib64/libc.so.6(gsignal+0x37) [0x7ffff2938207]
2021-12-28T07:46:20+00:00 server gaugefs[76021]: ABRT frame 03: /lib64/libc.so.6(abort+0x148) [0x7ffff29398f8]
2021-12-28T07:46:20+00:00 server gaugefs[76021]: ABRT frame 04: /lib64/libc.so.6(+0x78d27) [0x7ffff297ad27]
2021-12-28T07:46:20+00:00 server gaugefs[76021]: ABRT frame 05: /lib64/libc.so.6(+0x81489) [0x7ffff2983489]
2021-12-28T07:46:20+00:00 server gaugefs[76021]: ABRT frame 06: /usr/sbin/gaugefs(_ZNSs6assignERKSs+0x147) [0x4ecc57]

 

 

Environment

Release : 8.2.2 and prior

Cause

This is caused by a memory mismatch issue in the gaugefs process.

Resolution

This has been resolved in Security Analytics version 8.2.4 and greater.  Note that this will not affect the ability for the appliance to capture and index traffic.  The solera-gaugefs process is the report service and is only invoked when a report is requested on the appliance.