HPE Storage Users Group
https://3parug.com/

eventlog flooding
https://3parug.com/viewtopic.php?f=18&t=2683
Page 1 of 1

Author:  gkourv [ Thu Oct 12, 2017 8:43 am ]
Post subject:  eventlog flooding

Hello all,
running showeventlog shows thousands of messages like the following:
We are running 8200 with 3.2.2.530 (MU3)

Time : 2017-10-12 16:40:41 EEST
Severity : Informational
Type : Command executed
Message : {3paradm super all {{0 8}} -1 192.9.201.113 11316} {setcurrentdomain -} {}

Time : 2017-10-12 16:40:42 EEST
Severity : Informational
Type : Command executed
Message : {3paradm super all {{0 8}} -1 192.9.201.113 11316} {startprog 0 ifconfig fcnet2} {}

Time : 2017-10-12 16:40:42 EEST
Severity : Minor
Type : Command error
Message : {3paradm super all {{0 8}} -1 192.9.201.113 11316} {Command: startprog 0 ifconfig fcnet2 Error: user permission denied} {}

Time : 2017-10-12 16:40:46 EEST
Severity : Minor
Type : Command error
Message : {3paradm super all {{0 8}} -1 192.9.201.114 11212} {Command: getrcopy targets Error: Error: This system is not licensed for Remote Copy.} {}

Time : 2017-10-12 16:40:49 EEST
Severity : Minor
Type : Command error
Message : {3paradm super all {{0 8}} -1 192.9.201.113 5849} {Command: getrcopy targets Error: Error: This system is not licensed for Remote Copy.} {}

We haven't enabled remote copy ony any of our volumes so why is this happening?

Thanks,
George

Author:  MammaGutt [ Fri Oct 13, 2017 5:09 am ]
Post subject:  Re: eventlog flooding

Could 192.9.201.113 and 192.9.201.114 be SSMC installations?

These are the two IP addresses polling these commands. SSMC will do a lot of REST get commands to poll the current status of the system.

Author:  gkourv [ Fri Oct 13, 2017 5:22 am ]
Post subject:  Re: eventlog flooding

gkourv wrote:
Hello all,
running showeventlog shows thousands of messages like the following:
We are running 8200 with 3.2.2.530 (MU3)

Time : 2017-10-12 16:40:41 EEST
Severity : Informational
Type : Command executed
Message : {3paradm super all {{0 8}} -1 192.9.201.113 11316} {setcurrentdomain -} {}

Time : 2017-10-12 16:40:42 EEST
Severity : Informational
Type : Command executed
Message : {3paradm super all {{0 8}} -1 192.9.201.113 11316} {startprog 0 ifconfig fcnet2} {}

Time : 2017-10-12 16:40:42 EEST
Severity : Minor
Type : Command error
Message : {3paradm super all {{0 8}} -1 192.9.201.113 11316} {Command: startprog 0 ifconfig fcnet2 Error: user permission denied} {}

Time : 2017-10-12 16:40:46 EEST
Severity : Minor
Type : Command error
Message : {3paradm super all {{0 8}} -1 192.9.201.114 11212} {Command: getrcopy targets Error: Error: This system is not licensed for Remote Copy.} {}

Time : 2017-10-12 16:40:49 EEST
Severity : Minor
Type : Command error
Message : {3paradm super all {{0 8}} -1 192.9.201.113 5849} {Command: getrcopy targets Error: Error: This system is not licensed for Remote Copy.} {}

We haven't enabled remote copy ony any of our volumes so why is this happening?

Thanks,
George


You are right MammaGut, these IP's belong to SSMC hosts. Is there a way to disable this?

Thanks,
G.

Author:  MammaGutt [ Fri Oct 13, 2017 1:09 pm ]
Post subject:  Re: eventlog flooding

Remove the 3PARs from SSMC......

SSMC needs to issues these commands to verify the current status so it always detects changes that may have been done outside SSMC or on another SSMC instance.

Page 1 of 1 All times are UTC - 5 hours
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/