CWPS log are corrupted after running the log collector to gather logs.
search cancel

CWPS log are corrupted after running the log collector to gather logs.

book

Article ID: 260936

calendar_today

Updated On:

Products

Cloud Workload Protection for Storage

Issue/Introduction

The log_upload script copies log files to the AllEvents folder in the storage account for Cloud Workload Protection for Storage (CWP-S) in Azure. 

When using the shell script in Azure to download the files they won't open.  The zip file is corrupt.

Note:  This issue was not reproducible on any of BROADCOM test labs.  The issue only happened one resource group of many.

 

Cause

Unknown.  The zip files appear to become corrupted when they are copied to the AllEvents folder.  The script runs the command zip -r to zip the files.   

Resolution

In the log_upload script, comment out the lines:

rm -r $file  
rm -r $stagingDir

 

This modification prevents the log_upload script from removing the file from the /tmp folder on the VM.   

After this change, connect to the public ip address of the CU and get the files from the /tmp folder using Winscp and copy them to your machine. 

Open the zip file that was created to confirm that it is intact.

Additional Information

Where is the log_upload script?

See How to collect and upload logs for Symantec Cloud Workload Protection for Storage on Microsoft Azure