Failed to forward events to Event Manager because Datasource not registered
search cancel

Failed to forward events to Event Manager because Datasource not registered

book

Article ID: 244982

calendar_today

Updated On:

Products

CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

Events from NFA to PC messages:

TrapReceiverLog*.log:
0:00:01 4 - ConsoleEventProducer: Failed to forward events to Event Manager because Datasource not registered
0:00:01 6 - ConsoleEventProducer: The following events were not sent:
0:00:01 6 - ConsoleEventProducer:
[Event Type='ThresholdViolation' SubType='Protocol' Id='Pe-10.0.103.81:126' State='Closed' Description='Protocol Traffic Data End Event for Event 'Protocol HTTP Utilization by Volume': Interface '10.0.103.81::Interface 126' (10.0.103.81::IfIndex 126): Direction=In: Protocol=http: Threshold=Unknown. Observed Rate was Unknown']PM / EM Log file wrapper-*.log

PM / EM Log file wrapper-*.log
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 | ID: 1292488
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 | Address: http://10.2.2.93:8281/EventManager/EventManagerWS.asmx
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 | Encoding: UTF-8
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 | Http-Method: POST
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 | Content-Type: text/xml; charset=UTF-8

....

INFO  | jvm 1   | AAAA/MM/DD 00:00:01 | --------------------------------------
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 | ERROR | qtp817194751-125345     | 2022-06-27 00:00:01,318 | com.ca.im.portal.em.util.NPCEventManagerWSImpl
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 |      | Unregistered datasource attempted to push events to EM. Event data is:
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 | ERROR | qtp817194751-125345     | 2022-06-27 00:00:01,318 | com.ca.im.portal.em.util.NPCEventManagerWSImpl
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 |      | Event received
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 |  ProducerID: 7
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 |  LocalID: Pe-10.0.103.81:126
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 |  Category: PERFORMANCE
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 |  Type: ThresholdViolation
INFO  | jvm 1   | AAAA/MM/DD 00:00:01 |  SubType: Protocol

Environment

Release : 20.2

Component : NQRACO - NETQOS RA CONSOLE

Cause

See that the ProducerID is 7 (INFO  | jvm 1   | AAAA/MM/DD 00:00:01 |  ProducerID: 7) in log message

The EventProducerId on NFA system_settings table show 7
mysql -unetqos -pnetqos  reporter -t -e "select value from system_settings where parameter='EventProducerId';"
+-------+
| value |
+-------+
|   |
+-------+
 
The EM data_sources on PC Server show SourceID 4
mysql -unetqos -p em -t -e "select * from data_sources\G"
*************************** 2. row ***************************
      SourceID: 4
    ConsumerID: 1
    SourceGUID: 61f3e8ca814a4f18bdc6a78300b28c16
   ConsoleName: Network Flow [email protected]
 

The problem is that PM <> NFA sync sets the eventConsumerURL and eventProducerId at first bind and it doesn't keep it in sync afterwards

 

Resolution

on NFA Console Server open the command prompt and run:

mysql -unetqos -pnetqos reporter -t -e "update system_settings set value= 4 where parameter='EventProducerId';"

After restart the NetQoS Reporter/Analyzer Manager Service and let me know the results...