After Upgrade to 21.2.10, one of our Harvester servers is outputting an error for all interface pages.
Article ID: 243102
Updated On:
Products
Issue/Introduction
After Upgrade to 21.2.10, one of our Harvester servers is outputting an error for all interface pages.
An error occurred!
Control(30002): Stacked Protocol Trend - In
A Unable to connect to any of the specified MySQL hosts. error was returned:
...
The Netflow\Logs\oursql*.log file on the harvester shows queries to the 'ahtflows' table like this:
Trying to get some variables.
Some pointers may be invalid and cause the dump to abort.
Query (8ad14d9c7b): select srcaddr as hostAddr, count(*) as amountPerHost, ifnull(count(*)/ (@timeDiff / 60 ), count(*)) as averageMetric FROM ahtflows where ( timestamp > 1654189918 ) and ( timestamp <= 1654190280 ) group by hostAddr order by amountPerHost desc limit 10
Connection ID (thread ID): 22
Status: NOT_KILLED
Cause
Anomaly Detector component was running and attempting to query the Harvester's mysql database on port 3307.
The AD component has been deprecated, and it is not recommended to run this component in an NFA 21.2.x environment.
Environment
Release : 21.2
Component : NQRAHV - NETQOS RA HARVESTER
Resolution
Check whether you still have old "Anomaly Detectory" services running somewhere in your environment that are still hitting the Harvesters. Other that FF and Analysis Reports, that component also queries the "ahtflows" table.
The AD component has been deprecated, so if you are still running the either of the following services on any of your machines we would recommend stopping them:
"CA NFA Hunter Tracker Service"
"CA NFA Host Resolver Service"
Additional Information
Feedback
