When try to Edit/Modify/Delete an existing Agent Group, or when try to create a new Agent group, UI responded with "Failed to Save Configuration". In addition, the following behaviors were observed:
Aria Operations for Logs 8.x
One or more Agent Group is configured with excessive number of hosts. This lead to loginsight service crash due to buffer overflow when trying to edit any existing or create a new Agent Group. The following error can be seen from the logs events:
In ui_runtime.log
:[2025-01-16 16:55:37.095+0000] ["https-openssl-apr-443-exec-10"/192.168.68.248 INFO] [com.vmware.loginsight.web.config.UIConfigManager] [UIConfigManager received setConfigRequest]
[2025-01-16 16:55:37.140+0000] ["https-openssl-apr-443-exec-10"/192.168.68.248 WARN] [com.vmware.loginsight.web.config.UIConfigManager] [UIConfigManager setConfigRequest unsuccessful, reason: Socket is closed by peer.]
[2025-01-16 16:55:37.142+0000] ["https-openssl-apr-443-exec-10"/192.168.68.248 ERROR] [com.vmware.loginsight.web.actions.settings.AgentsActionBean] [Failed to save agent configuration]
com.vmware.loginsight.config.ConfigurationException: Socket is closed by peer.
at com.vmware.loginsight.web.actions.settings.AgentsActionBean.saveNewConfig(AgentsActionBean.java:739) ~[classes/:?]
at com.vmware.loginsight.web.actions.settings.AgentsActionBean.applyAgentsConfig(AgentsActionBean.java:696) [classes/:?]
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
In runtime.log
, on the same time period when the above logging occurred:
[2025-01-16 16:56:24.473+0000] [main/192.168.68.248 ERROR] [com.vmware.vipclient.i18n.messages.api.opt.local.LocalMessagesOpt] [Failed to get offline messages for product: JavaclientTest 1.0.0, component: JAVA, locale: en, exception: Failed to get resource
bundle for locale: en]
[2025-01-16 16:56:24.546+0000] [main/192.168.68.248 ERROR] [com.vmware.loginsight.config.CollectionAgentsConfig] [Error parsing criteria for class BCCR_ADFS. Ignoring class.]
com.vmware.loginsight.commons.expr.ParseError: Stack overflow while parsing expression
In the above logs, in this example, the "BCCR_ADFS"
agent group was configured with too many hosts, causing a buffer overflow, which reset the loginsight service.
To fix this Agent Group issue, delete the existing problematic Agent Group.
Method 1: If Delete Option is available via UI.
Method 2: If Delete Option failed via UI, remove the problematic Agent Group from Internal Configuration.
BCCR_ADFS"
Once the problematic Agent Group has been deleted, the existing Agent Group can be edited, and new Agent Group can be created. The loginsight service will no longer be crashing.