CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Internal Security > Endpoint Security (Formerly Integrity)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-10-28
Junior Member
 
Join Date: 2008-01-09
Posts: 2
Rep Power: 0
dhorvat has an average reputation (10+)
Default Integrity, ELA error, log dropped

I receive lot of error messages (over 200 in just 1 sec !!??) generated in integrity logs...
"[2008-10-28 11:44:36,062] ERROR - [LogUploadInternal] ELA error, log dropped, queue size exceeded"

What does it mean? can somebody help!

Integrity Version Information
Product: Integrity Server
Version: 6.60.864.000


thanks
Reply With Quote
  #2 (permalink)  
Old 2008-10-29
Senior Member
 
Join Date: 2007-06-22
Posts: 111
Rep Power: 2
CSING has an average reputation (10+)
Default Re: Integrity, ELA error, log dropped

There was a bug in the logupload feature in build 199 that under certain circumstances would cause a client to continously attempt to upload empty logs.

This causes the Apache_access.log to grow very large (in the gig range). Generally at this point this file is too large to manage. Here is a procedure identify and to resolve this issue.

1. Stop the tomcat and Apache services (do this during a maintenance window)

2. rename the apache_access.log. (and any others that are over 200MB)

3. Restart the services.

4. After the clients have connected to the Integrity server examine the apache_access log in MS excel.

5. Sort the file by IP address and then the time stamp.

6. You should be able to identify the endpoints that continously uploading logs to the integrity server.

7. Reinstall the client on these endpoints. Preferably the latest version.

You may have to do this for 5-10 clients depending on the size of your deployment.


hth
Reply With Quote
  #3 (permalink)  
Old 2008-11-20
Junior Member
 
Join Date: 2008-01-09
Posts: 2
Rep Power: 0
dhorvat has an average reputation (10+)
Default Re: Integrity, ELA error, log dropped

thank a lot!
this helps!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 01:21.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0