CWPS log are corrupted after running the log collector to gather logs.
Article ID: 260936
Updated On:
Products
Issue/Introduction
The log_upload script copies log files to the AllEvents folder in the storage account for Cloud Workload Protection for Storage (CWP-S) in Azure.
When using the shell script in Azure to download the files they won't open. The zip file is corrupt.
Note: This issue was not reproducible on any of BROADCOM test labs. The issue only happened one resource group of many.
Cause
Unknown. The zip files appear to become corrupted when they are copied to the AllEvents folder. The script runs the command zip -r to zip the files.
Resolution
In the log_upload script, comment out the lines:
rm -r $file
rm -r $stagingDir
This modification prevents the log_upload script from removing the file from the /tmp folder on the VM.
After this change, connect to the public ip address of the CU and get the files from the /tmp folder using Winscp and copy them to your machine.
Open the zip file that was created to confirm that it is intact.
Additional Information
Where is the log_upload script?
See How to collect and upload logs for Symantec Cloud Workload Protection for Storage on Microsoft Azure
Feedback
