Any syslog is not processing

Products

• VMware Smart Assurance
• Network Observability

Issue/Introduction

Syslog file is updated under $VOYENCE_HOME/cm however it is not read by commmgrd service. 

event.log in $VOYENCE_HOME/logs shows:

Oct 24 12:36:37 -297826560/syslog#1: EventHandler: Child process (32575) starting Syslog Handler
Oct 24 12:36:37 -297826560/syslog#2: Syslog Process started...
Oct 24 12:36:37 -297826560/syslog#2: Syslog notifier setup successfully, monitoring /opt/smarts-ncm/cm/Syslog
Oct 24 12:36:37 -297826560/syslog#2: Syslog notifier, monitoring existing file inode did not change

Environment

All Supported NCM versions

Cause

Syslog.checkpoint is not picking current inode of $VOYENCE_HOME/cm/Syslog

Resolution

Identify inode as 

INODE=$(stat -c%i $VOYENCE_HOME/cm/Syslog) 

Update it as 

echo "$INODE,0" > $VOYENCE_HOME/cm/Syslog.checkpoint 

Additional Information

Syslog processing explained

Syslog rotation settings