Hello,
I can't get my SLM 1.2 started. Here's what happens:

:/opt/novell/sentinel_log_mgr/bin # ./server.sh start
Starting Novell Sentinel Log Manager...
Failed to start database.
Unable to start database.

Looking at :/var/opt/novell/sentinel_log_mgr/log/db_start_stop.log
Fri Dec 16 12:16:05 2011 waiting for server to start..... done
Fri Dec 16 12:16:05 2011 server started
Tue Dec 20 11:22:29 2011 waiting for server to shut down.... done
Tue Dec 20 11:22:29 2011 server stopped
Tue Dec 20 11:23:29 2011 waiting for server to
start............................................. ..................could
not start server
Tue Dec 20 12:19:45 2011 waiting for server to
start............................................. ..................could
not start server
Tue Dec 20 12:45:24 2011 waiting for server to
start............................................. ..................could
not start server
Tue Dec 20 13:12:02 2011 waiting for server to
start............................................. ..................could
not start server
Tue Dec 20 15:37:42 2011 waiting for server to
start............................................. ..................could
not start server
Tue Dec 20 15:38:55 2011 waiting for server to
start............................................. ..................could
not start server
Thu Dec 22 14:52:34 2011 waiting for server to
start............................................. ..................could
not start server

List of db log files at /var/opt/novell/sentinel_log_mgr/log:
-rw------- 1 novell novell 0 Dec 19 23:59 db.1.log
-rw------- 1 novell novell 0 Dec 20 11:22 db.2.log
-rw------- 1 novell novell 0 Dec 14 00:00 db.3.log
-rw------- 1 novell novell 0 Dec 15 00:00 db.4.log
-rw------- 1 novell novell 1006 Dec 16 12:16 db.5.log
-rw------- 1 novell novell 0 Dec 17 23:59 db.6.log
-rw------- 1 novell novell 0 Dec 18 23:59 db.7.log

Looking at db.5.log:
2011-12-16 12:14:32 EET|0|LOG: unexpected EOF on client connection
2011-12-16 12:14:32 EET|0|LOG: unexpected EOF on client connection
2011-12-16 12:14:32 EET|0|LOG: unexpected EOF on client connection
2011-12-16 12:14:32 EET|0|LOG: unexpected EOF on client connection
2011-12-16 12:14:32 EET|0|LOG: unexpected EOF on client connection
2011-12-16 12:14:32 EET|0|LOG: unexpected EOF on client connection
2011-12-16 12:15:38 EET|0|LOG: received fast shutdown request
2011-12-16 12:15:38 EET|0|LOG: aborting any active transactions
2011-12-16 12:15:38 EET|0|LOG: autovacuum launcher shutting down
2011-12-16 12:15:38 EET|0|LOG: shutting down
2011-12-16 12:15:38 EET|0|LOG: database system is shut down
2011-12-16 12:16:04 EET|0|LOG: database system was shut down at
2011-12-16 12:15:38 EET
2011-12-16 12:16:04 EET|0|FATAL: the database system is starting up
2011-12-16 12:16:04 EET|0|LOG: database system is ready to accept
connections
2011-12-16 12:16:04 EET|0|LOG: autovacuum launcher started

Looking at end of /var/opt/novell/sentinel_log_mgr/log/server0.0.log:
Sat Dec 17 22:16:51 EET 2011|SEVERE|Disk Monitor
Timer|esecurity.ccs.comp.event.indexedlog.IndexedL ogPartitionManager.makeOnlineSpace
Prematurely deleting raw datafile:
/var/opt/novell/sentinel_log_mgr/data/rawdata/online/ADC5FBB0-A62E-102E-A9F1-000C290394DD/2011-11/23-0600.zip
Sat Dec 17 22:16:51 EET 2011|SEVERE|Disk Monitor
Timer|esecurity.ccs.comp.event.rawdata.RawDataCons umer.deleteRawDataFile
Too many or no raw data files with the name
/var/opt/novell/sentinel_log_mgr/data/rawdata/online/ADC5FBB0-A62E-102E-A9F1-000C290394DD/2011-11/23-0600.zip
fou
nd in the database.
Sat Dec 17 22:16:51 EET 2011|SEVERE|Disk Monitor
Timer|esecurity.ccs.comp.event.indexedlog.IndexedL ogPartitionManager.makeOnlineSpace
Prematurely deleting raw datafile:
/var/opt/novell/sentinel_log_mgr/data/rawdata/online/ADC5FBB0-A62E-102E-AB12-000C290394DD/2011-11/23-0600.zip
Sat Dec 17 22:16:51 EET 2011|SEVERE|Disk Monitor
Timer|esecurity.ccs.comp.event.rawdata.RawDataCons umer.deleteRawDataFile
Too many or no raw data files with the name
/var/opt/novell/sentinel_log_mgr/data/rawdata/online/ADC5FBB0-A62E-102E-AB12-000C290394DD/2011-11/23-0600.zip
fou
nd in the database.
Sat Dec 17 22:16:51 EET 2011|SEVERE|Disk Monitor
Timer|esecurity.ccs.comp.event.indexedlog.IndexedL ogPartitionManager.makeOnlineSpace
Prematurely deleting raw datafile:
/var/opt/novell/sentinel_log_mgr/data/rawdata/online/ADC5FBB0-A62E-102E-AB12-000C290394DD/2011-11/23-1000.zip
Sat Dec 17 22:16:51 EET 2011|INFO|Archive Monitor
Timer|esecurity.ccs.comp.archive.EArchiveConfigSer vice.isArchiveLocationAvailable
Archive location is not configured.
Sat Dec 17 22:16:51 EET 2011|SEVERE|Disk Monitor
Timer|esecurity.ccs.comp.event.rawdata.RawDataCons umer.deleteRawDataFile
Too many or no raw data files with the name
/var/opt/novell/sentinel_log_mgr/data/rawdata/online/ADC5FBB0-A62E-102E-AB12-000C290394DD/2011-11/23-1000.zip
fou
nd in the database.
Sat Dec 17 22:16:51 EET 2011|SEVERE|Disk Monitor
Timer|esecurity.ccs.comp.event.indexedlog.IndexedL ogPartitionManager.makeOnlineSpace
Unable to free at least half of the 13,141Mb of online space
requested: may soon be unable to continue to log events.)
Sat Dec 17 22:16:56 EET
2011|INFO|pool-3-thread-2|esecurity.ccs.comp.event.rawdata.RawEventSource. closeOutput
Close raw data sink called for file 16-1300.open
Sat Dec 17 22:16:56 EET
2011|INFO|pool-3-thread-2|esecurity.ccs.comp.event.rawdata.RawEventSource. closeOutput
Close raw data sink called for file 17-0000.open
Sat Dec 17 22:16:56 EET
2011|INFO|pool-3-thread-2|esecurity.ccs.comp.event.rawdata.RawEventSourceM anager.checkForUncompressedFiles
Exiting checkForUncompressedFiles
Sat Dec 17 22:17:06 EET 2011|INFO|ActiveMQ Session
Task|esecurity.ccs.comp.router.EventRouter.reportB atchStats
Sent 98raw data records (140,326 bytes) in 98batches on channel
raw_data_internal_route_no_channel over 106sec, averaging 0.9rps,
1,431bytes per record, and
1raw data records/batch in component EventRouterServer.
Sat Dec 17 22:17:06 EET 2011|INFO|ActiveMQ Session
Task|esecurity.ccs.comp.router.EventRouter.reportB atchStats
Sent 98events (131,817 bytes) in 98batches on channel
events_internal_route_no_channel over 106sec, averaging 0.9eps,
1,345bytes per event, and 1events/batch
in component EventRouterServer.
Sat Dec 17 22:17:06 EET 2011|INFO|ActiveMQ Session
Task|esecurity.ccs.comp.router.EventRouter.reportB atchStats
Sent a total of 196events and raw data records (272,143 bytes)
in 196batches over 106sec, averaging 1.8per second, 1,388bytes per
event, and 1events and raw
data records/batch in component EventRouterServer.
Sat Dec 17 22:17:42 EET
2011|INFO|Thread-52|esecurity.ccs.comp.router.EventRouter.reportBat chStats
Sent 2events (705 bytes) in 2batches on channel
events_internal_route_no_channel over 147sec, averaging 0eps, 352bytes
per event, and 1events/batch in compon
ent EventRouter.
Sat Dec 17 22:17:42 EET
2011|INFO|Thread-52|esecurity.ccs.comp.router.EventRouter.reportBat chStats
Sent 1raw data records (1,117 bytes) in 1batches on channel
raw_data_internal_route_no_channel over 147sec, averaging 0rps,
1,117bytes per record, and 1raw d
ata records/batch in component EventRouter.
Sat Dec 17 22:17:42 EET
2011|INFO|Thread-52|esecurity.ccs.comp.router.EventRouter.reportBat chStats
Sent 2events (1,883 bytes) in 2batches on channel
events_internal_route_no_channel over 147sec, averaging 0eps, 941bytes
per event, and 1events/batch in comp
onent EventRouter.
Sat Dec 17 22:17:42 EET
2011|INFO|Thread-52|esecurity.ccs.comp.router.EventRouter.reportBat chStats
Sent a total of 5events and raw data records (3,705 bytes) in
5batches over 147sec, averaging 0per second, 741bytes per event, and
1events and raw data recor
ds/batch in component EventRouter.
Sat Dec 17 22:17:42 EET
2011|INFO|Thread-9810|esecurity.ccs.comp.transform.PersistentMapMan ager.report
Total 5 persistent maps with 165KB in 360 entries; total of 1
fetched and 1 saved
Sat Dec 17 22:17:42 EET
2011|INFO|Thread-52|esecurity.ccs.comp.transform.PersistentMapManag er.report
5 registered maps: CustomerDim 0KB in 3 entries, ProtocolDim
28KB in 108 entries, EventTaxonomyDim 33KB in 82 entries, AgentDim 64KB
in 102 entries (total 1
fetched, 1 saved, 0 removed), EventXDASTaxonomyDim 38KB in 65 entries
Sat Dec 17 22:18:37 EET
2011|INFO|SyslogUDPSourceStatusChecker|esecurity.c cs.comp.audit.AuditLogger.execute
Audit High:: Call by user System to app Syslog Connector object
Syslog Connector method LostConnection client Unknown succeeded : A
connection from machine 1
72.16.10.155 was lost with the Syslog Event Source Server: Syslog
Server UDP (ID 72AA9150-D37A-102B-82AD-005056C00008).
Sat Dec 17 22:18:37 EET 2011|INFO|ActiveMQ Session
Task|esecurity.ccs.comp.router.EventRouter.reportB atchStats
Sent 201raw data records (316,471 bytes) in 201batches on
channel raw_data_internal_route_no_channel over 90sec, averaging 2.2r


I can't recall doing anything I hadn't done before at the time it got
screwed.. I was having trouble with running the Authentication grouped
by server -reports though. It sometimes jammed the SLM if quering events
from a long period. What I used to do was to give it "server.sh
try-restart". I don't know if these problems are related..
Any advice?

-Petri


--
petri_vesamaki
------------------------------------------------------------------------
petri_vesamaki's Profile: http://forums.novell.com/member.php?userid=104165
View this thread: http://forums.novell.com/showthread.php?t=449929