| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| I receive lot of error messages (over 200 in just 1 sec !!??) generated in integrity logs... "[2008-10-28 11:44:36,062] ERROR - [LogUploadInternal] ELA error, log dropped, queue size exceeded" What does it mean? can somebody help! Integrity Version Information Product: Integrity Server Version: 6.60.864.000 thanks |
| |||
| There was a bug in the logupload feature in build 199 that under certain circumstances would cause a client to continously attempt to upload empty logs. This causes the Apache_access.log to grow very large (in the gig range). Generally at this point this file is too large to manage. Here is a procedure identify and to resolve this issue. 1. Stop the tomcat and Apache services (do this during a maintenance window) 2. rename the apache_access.log. (and any others that are over 200MB) 3. Restart the services. 4. After the clients have connected to the Integrity server examine the apache_access log in MS excel. 5. Sort the file by IP address and then the time stamp. 6. You should be able to identify the endpoints that continously uploading logs to the integrity server. 7. Reinstall the client on these endpoints. Preferably the latest version. You may have to do this for 5-10 clients depending on the size of your deployment. hth |
![]() |
| Thread Tools | |
| Display Modes | |
| |