Missing log from fwsm

Hi,
I noticed that some of our fwsm traffic log is not appearing in the syslog server. I noticed in the show logging queue, it's reporting discard messages like below:
fwsm# sh logg que
Logging Queue length limit : 512 msg(s), 921036 msg(s) discarded.
Current 512 msg on queue, 512 msgs most on queue
fwsm# sh logg que
Logging Queue length limit : 512 msg(s), 921654 msg(s) discarded.
Current 512 msg on queue, 512 msgs most on queue
Does anyone know what it mean by this ? I have tried to increase the queue to 2048 but after a few minutes, it start to fill up and discard message counter increase. I tried to set unlimited but the Current Msg counter keep increment without going down. Does this mean the fw is dropping or the syslog server is too slow to serve ?
Any comments or ideas are welcome
Thanks
Justin Vo

Hi,
Disable local logging ...
Only test with logging trap 4 and then with trap 7.
Check your logging server and check trough a repeated ping if the connection is not dropping.
If you find this post usefull
please don't forget to rate this
#Iwan Hoogendoorn

Similar Messages

Apply missing log on physical standby database

How to apply the missing log on physical standby database?
I already registered the missing log and started the recovery process.
Still...having log on standby that has status ..not applied.
SQL> SELECT SEQUENCE#,APPLIED FROM V$ARCHIVED_LOG ORDER BY SEQUENCE#;
SEQUENCE# APP
16018 YES
16019 YES
16020 NO ---------------------> Not applied.
16021 YES
Thanks

Not much experience doing this, but according to the 9i doc (http://download-east.oracle.com/docs/cd/B10501_01/server.920/a96653/log_apply.htm#1017352), all you need is properly-configured FAL_CLIENT and FAL_SERVER initialization parameters, and things should take care of themselves automatically. Let us know if that doesn't work for you, we might be able to think of something else.
Daniel

[svn:cairngorm3:] 16142: Insync Refactorings, Module lib: Added missing parameters from IModuleInfo interface.

Revision: 16142
Revision: 16142
Author:   [email protected]
Date:     2010-05-16 14:21:40 -0700 (Sun, 16 May 2010)
Log Message:
Insync Refactorings, Module lib: Added missing parameters from IModuleInfo interface. Maven: Take Persistence out.
Modified Paths:
    cairngorm3/trunk/libraries/Module/src/com/adobe/cairngorm/module/ModuleInfo.as
    cairngorm3/trunk/libraries/ModuleTest/.actionScriptProperties
    cairngorm3/trunk/libraries/lib-parent/pom.xml
    cairngorm3/trunk/samples/insync/insync-basic/src/InsyncContext.mxml
    cairngorm3/trunk/samples/insync/insync-basic/src/insync/application/RefreshSearchAfterSav eController.as
    cairngorm3/trunk/samples/insync/insync-basic/src/insync/presentation/ContactList.mxml
    cairngorm3/trunk/samples/insync/insync-basic/src/insync/presentation/ContactsNavigator.mx ml
    cairngorm3/trunk/samples/insync/insync-basic/src/insync/presentation/PictureInput.mxml
    cairngorm3/trunk/samples/insync/insync-basic/src/insync/presentation/Toolbar.mxml
    cairngorm3/trunk/samples/insync/insync-basic/src/insync/presentation/ToolbarPM.as
    cairngorm3/trunk/samples/insync/insync-basic/test/insync/application/RefreshSearchAfterSa veControllerTest.as
    cairngorm3/trunk/samples/insync/insync-basic/test/insync/presentation/ToolbarPMTest.as
    cairngorm3/trunk/samples/insync/insync-modularExtended-contacts/.actionScriptProperties
    cairngorm3/trunk/samples/insync/insync-modularExtended-contacts/src/insync/contacts/appli cation/RefreshSearchAfterSaveController.as
    cairngorm3/trunk/samples/insync/insync-modularExtended-contacts/src/insync/contacts/prese ntation/ContactFormPM.as
    cairngorm3/trunk/samples/insync/insync-modularExtended-contacts/src/insync/contacts/prese ntation/PictureInput.mxml
    cairngorm3/trunk/samples/insync/insync-modularExtended-contacts/test/insync/contacts/appl ication/RefreshSearchAfterSaveControllerTest.as
    cairngorm3/trunk/samples/insync/insync-modularExtended-expenses/.actionScriptProperties
    cairngorm3/trunk/samples/insync/insync-modularExtended-expenses/src/ExpensesModule.mxml
    cairngorm3/trunk/samples/insync/insync-modularExtended-expenses/src/ExpensesModuleRig.mxm l
    cairngorm3/trunk/samples/insync/insync-modularExtended-expenses/src/ExpensesRigContext.mx ml
    cairngorm3/trunk/samples/insync/insync-modularExtended-messaging/.actionScriptProperties
    cairngorm3/trunk/samples/insync/insync-modularExtended-messaging/src/ComposeMessageModule .mxml
    cairngorm3/trunk/samples/insync/insync-modularExtended-messaging/src/ComposeMessageModule Rig.mxml
    cairngorm3/trunk/samples/insync/insync-modularExtended-messaging/src/ComposeMessageModule RigContext.mxml
    cairngorm3/trunk/samples/insync/insync-modularExtended-shell/src/insync/application/Compo seMessageController.as
    cairngorm3/trunk/samples/insync/insync-modularExtended-shell/src/insync/presentation/Cont entViewStack.mxml
    cairngorm3/trunk/samples/insync/insync-modularExtended-shell/src/insync/presentation/Tool bar.mxml
    cairngorm3/trunk/samples/insync/insync-modularExtended-shell/src/insync/presentation/Tool barPM.as
    cairngorm3/trunk/samples/insync/insync-modularExtended-shell/test/insync/presentation/Too lbarPMTest.as

[svn] 4918: Missing file from previous checkin.

Revision: 4918
Author: [email protected]
Date: 2009-02-10 13:56:12 -0800 (Tue, 10 Feb 2009)
Log Message:
Missing file from previous checkin.
Modified Paths:
flex/sdk/trunk/modules/debugger/src/java/flash/tools/debugger/concrete/djapi_en.propertie s

Here are typical layouts for the iTunes folders:
The iTunes folder is normally inside <User's Music>. I get the idea that things are different but I don't have a clear picture yet. I think you've somehow managed to get the media folder pointed at <User's Music> instead <User's Music>\iTunes\iTunes Media. A screenshot of the iTunes > Edit > Preferences > Advanced might help confirm. Once we know what is going on it should be possible to make suggestions as to what to do next.
tt2

[svn:osmf:] 10584: Adding a missing file from that last folder structure refactor.

Revision: 10584
Author:   [email protected]
Date:     2009-09-24 17:19:48 -0700 (Thu, 24 Sep 2009)
Log Message:
Adding a missing file from that last folder structure refactor.
Added Paths:
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/AkamaiBasicStreamingPlugin.as

Hello,
Welcome to MSDN forum.
I am afraid that the issue is out of support range of VS General Question forum which mainly discusses
the usage of Visual Studio IDE such as WPF & SL designer, Visual Studio Guidance Automation Toolkit, Developer Documentation and Help System
and Visual Studio Editor.
Because your issue is about ASP.NET web application development, I suggest that you can consult your issue on ASP.NET forum:
http://forums.asp.net/
for better solution and support.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Run VIRSA/ZVFATBAK to generate missed log

Hello experts, we had an upgrade a couple weeks ago and we had to put the VIRSA/ZVFATBAK job on hold. Because of this we have a couple of FF logons missing data. We have the "BACKGROUND JOB WAS NOT SCHEDULED/LOG & FILE NOT YET GENERATED" error. Usually I can run job immediately after the upgrade and gather this missed data, however this time we forgot and now trying to go back 3 weeks ago.
I thought since I can still see the data in STAD (ST03) I should be able to get VIRSA/ZVFATBAK to run and find the data. This is not the case this time. Can anyone confirm its too late to generate these missed logs?
Thanks
Dave Wood

Hi David,
If you see that logs are missing for certain date and time then you can run the report /VIRSA/ZVFATBAK with date and time for which logs where missing, see sap note - 1142312 (read this to understand what start & read time should be given to run the report)
Please be informed that the report will fetch data from STAT and CDHDR, CDPOS only if the data exists in these for the given date and time. If the data has been purged from STAT for that period then its not possible to get the logs.
Also note this point - As per design, manual FF log update considers only the firefighter ids
assigned to the user who is triggering the update through the firefighter dashboard. Whereas the scheduled background job considers all the FFIDs for a particular time period.
Best Regards,
Sirish Gullapalli.

Restoration of /var/log/secure.log from Time Machine Backup

I have a need to restore /var/log/secure.log from Time Machine Backup on Lion Server, but can not find any entries for this file in the Time Machine archives even when using the find command. It seems like it is not backed up. I'm hoping that this is not the case; if it is it represents a pretty large mistake from a security perspective.
Is there something that I'm missing?
Thanks

gracoat wrote:
...sigh...
Try time machine and see what happens... I dare ya!
I've helped several folks here who were using TM on Snow Leopard Server quite successfully. In most cases, as in most cases of trouble with backups on client Macs, they were having hardware problems.
Granted this is a 10.6 server page, but they haven't updated open LDAP in a way that would change it's database functionality, nor have they changed the way time machine backs up and what it backs up.
Nowhere there does Apple say that "Time Machine is NOT a suitable backup solution for a server" or anything like that.
The article clarifies what it does, and does not, back up. So it may or may not be a suitable backup solution depending on individual situations.

Logging of FWSM context logs to two diffrent zone SYSLOG SERVER

Hello Sat Shri Akal,
Can any one help me about logging of FWSM context logs to two diffrent zone SYSLOG SERVER and SYSLOG Collector
in CSM 3.2.2. I am able to have logs from Admin context but not from my other context of FWSM. Otherwise that context is sending syslogs to ONE syslog server in similsr vlan,but why that perticular context is not able to log ay syslog collector of CSM which is having logs from admin context. Please help me in this case.
regards

Pradeep,
All contexts should be able to reach the CSM server's IP address just like the admin context.
The individual contexts should be configured to send logs to the CSM server's IP address.
From CSM go under each context and add management IP address for the particular context.
Once the above is done you will see logs from all the contexts under CSM.
-Kureli

Missing documents from 2LIS_03_BF/2LIS_03_UM

We discovered that on one day last week for a few hours most if not all material and accounting documents were not getting captured coming from 2LIS_03_BF and UM.
We've been live using 2LIS_03_BF and UM since May of last year and never had any trouble with missing documents from the inventory extractors until last week, and are not sure what could cause this?
We patched things up by identifying the missing documents and loading those into BW doing new initializations/full repair requests. Everything seems fine now, but we'd like to know how to prevent this in the future. Has anyone experienced this before where suddenly LO documents are not getting captured?
We found OSS note 766622 which allows for a logging feature for application 03 (LO-IM) but are not sure what kind of system overhead this will cause. Has anyone else implemented this note and could comment on any impact on the R/3 production system?
Thanks,
Chris

Hi Chris,
you are not the first and probably you will not the last to face similar problem with inventory management: I already saw similar situation, but I never found a customer with this OSS Note applied (that, among the other thing, is not a solution, but an activation of a log system in order to hope to understand something next time will happen a similar problem)...
If SAP support has this type of approach in its OSS note I think that the answer to your doubt will remain unanswered: the cause of this problem is not known and (as you can understand from your experience) it's really hard to understand what's happened !
The only way to go is applying the log system as per OSS Note and hoping (what a paradox !) that the problem will raise again !!!
If you apply the note, I don't believe that you will see relevant performance impact (even if you have to write on TMCEXLOG table), but this depends from the average number of your material movements/delta records...
Bye,
Roberto

Cannot email logs from RV220W

Hi
I am trying to setup logging on my router. I want to use my gmail account / gmail SMTP server to send emails.
Has anyone got this working? Does the router support TLS for SMTP?
Oh - and I also get the "critical error" page. I get it when I try to un-check the send logs checkbox in the remote logging management page.
Thanks,
Alex

Alexandru Ghiondea wrote:HiI am trying to setup logging on my router. I want to use my gmail account / gmail SMTP server to send emails.Has anyone got this working?
Yes, I am emailing logs from the server to SMTP port 25. They aren't very useful however, since they really don't record anything useful. Either I have it set up wrong (but I don't think so) or the email logging is missing all most all of the significant events. Also, the log entries really don't any detail of source/destination ip's and ports. Here is an example...
[rv220w]Tue Aug 30 10:50:56 2011(GMT-0500) [rv220w][Kernel][KERNEL] ip_conntrack_in: Frag of proto 17 (hook=0)
[rv220w]Tue Aug 30 10:50:56 2011(GMT-0500) [rv220w][Kernel][KERNEL] ip_conntrack_in: Frag of proto 17 (hook=0)
[rv220w]Tue Aug 30 10:50:56 2011(GMT-0500) [rv220w][Kernel][KERNEL] ip_conntrack_in: Frag of proto 17 (hook=0)
[rv220w]Tue Aug 30 11:15:56 2011(GMT-0500) [rv220w][Kernel][KERNEL] ERROR:endChantRecv: protocol PNAC returned !OK
[rv220w]Tue Aug 30 11:15:56 2011(GMT-0500) [rv220w][Kernel][KERNEL] ERROR:endChantRecv: protocol PNAC returned !OK
[rv220w]Tue Aug 30 11:33:46 2011(GMT-0500) [rv220w][Kernel][KERNEL] printk: 5 messages suppressed.
[rv220w]Tue Aug 30 11:33:46 2011(GMT-0500) [rv220w][Kernel][KERNEL] ip_conntrack_in: Frag of proto 17 (hook=0)
[rv220w]Tue Aug 30 11:33:46 2011(GMT-0500) [rv220w][Kernel][KERNEL] ip_conntrack_in: Frag of proto 17 (hook=0)
[rv220w]Tue Aug 30 11:33:51 2011(GMT-0500) [rv220w][Kernel][KERNEL] ip_conntrack_in: Frag of proto 17 (hook=0)
[rv220w]Wed Aug 31 11:40:02 2011(GMT-0500) [rv220w][Kernel][KERNEL] IPsec: device unregistering: ppp0
[rv220w]Tue Aug 30 11:33:51 2011(GMT-0500) [rv220w][Kernel][KERNEL] ip_conntrack_in: Frag of proto 17 (hook=0)
Does anyone know where the logs are for refused connections or VPN accesses?
Oh - and I also get the "critical error" page. I get it when I try to un-check the send logs checkbox in the remote logging management page.
This one is in the firmware release notes :-( At least it is a known bug.

I'm missing money from my account.

im missing money from my account that i never spent. I haven't gotten any receipts at all. I would really like to know why there is money missing.

For info these are user-to-user forums, we won't know where the money has gone.
Have you checked the purchase history on your account : See your purchase history in the iTunes Store - Apple Support ?
If you can't see where it went (and you've tried logging out and back into your account to see if it updates) then you could try contacting iTunes Support and see if they can help : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

Insert old missing data from one table to another(databaase trigger)

Hello,
i want to do two things
1)I want to insert old missing data from one table to another through a database trigger but it can't be executed that way i don't know what should i do in case of replacing old data in table_1 into table_2
2)what should i use :NEW. OR :OLD. instead.
3) what should i do if i have records exising between the two dates
i want to surpress the existing records.
the following code is what i have but no effect occured.
CREATE OR REPLACE TRIGGER ATTENDANCEE_FOLLOWS
AFTER INSERT ON ACCESSLOG
REFERENCING NEW AS NEW OLD AS OLD
FOR EACH ROW
DECLARE
V_COUNT       NUMBER(2);
V_TIME_OUT    DATE;
V_DATE_IN     DATE;
V_DATE_OUT    DATE;
V_TIME_IN     DATE;
V_ATT_FLAG    VARCHAR2(3);
V_EMP_ID      NUMBER(11);
CURSOR EMP_FOLLOWS IS
SELECT   EMPLOYEEID , LOGDATE , LOGTIME , INOUT
FROM     ACCESSLOG
WHERE    LOGDATE
BETWEEN TO_DATE('18/12/2008','dd/mm/rrrr')
AND      TO_DATE('19/12/2008','dd/mm/rrrr');
BEGIN
FOR EMP IN EMP_FOLLOWS LOOP
SELECT COUNT(*)
INTO V_COUNT
FROM EMP_ATTENDANCEE
WHERE EMP_ID    = EMP.EMPLOYEEID
AND    DATE_IN   = EMP.LOGDATE
AND    ATT_FLAG = 'I';
IF V_COUNT = 0 THEN
INSERT INTO EMP_ATTENDANCEE (EMP_ID, DATE_IN ,DATE_OUT
                            ,TIME_IN ,TIME_OUT,ATT_FLAG)
     VALUES (TO_NUMBER(TO_CHAR(:NEW.employeeid,99999)),
             TO_DATE(:NEW.LOGDATE,'dd/mm/rrrr'),       -- DATE_IN
             NULL,
             TO_DATE(:NEW.LOGTIME,'HH24:MI:SS'),      -- TIME_IN
             NULL ,'I');
ELSIF   V_COUNT > 0 THEN
UPDATE EMP_ATTENDANCEE
    SET DATE_OUT       = TO_DATE(:NEW.LOGDATE,'dd/mm/rrrr'), -- DATE_OUT,
        TIME_OUT       =   TO_DATE(:NEW.LOGTIME,'HH24:MI:SS'), -- TIME_OUT
        ATT_FLAG       =   'O'
        WHERE EMP_ID   =   TO_NUMBER(TO_CHAR(:NEW.employeeid,99999))
        AND   DATE_IN <= (SELECT MAX (DATE_IN )
                           FROM EMP_ATTENDANCEE
                           WHERE EMP_ID = TO_NUMBER(TO_CHAR(:NEW.employeeid,99999))
                           AND   DATE_OUT IS NULL
                           AND   TIME_OUT IS NULL )
AND   DATE_OUT IS NULL
AND   TIME_OUT IS NULL ;
END IF;
END LOOP;
EXCEPTION
WHEN OTHERS THEN RAISE;
END ATTENDANCEE_FOLLOWS ;
                        Regards,
Abdetu..

INSERT INTO SALES_MASTER
   ( NO
   , Name
   , PINCODE )
   SELECT SALESMANNO
        , SALESMANNAME
        , PINCODE
     FROM SALESMAN_MASTER;Regards,
Christian Balz

How to write to windows event logs from determinations-server under IIS

This is just an FYI technical bit of information I wish someone had shared with me before I started trying to write OPA errors to the windows event log... Most problems writing to the windows event log from log4net occur because of permissions. Some problems are because determinations-server does not have permissions to create some registry entries. Some problems cannot be resolved unless specific registry entry permissions are actually changed. We had very little consistency with the needed changes across our servers, but some combination of the following would always get the logging to the windows event log working.
To see log4net errors as log4net attempts to utilize the windows event log, temporarily add the following to the web.config:
<appSettings>

<add key="log4net.Internal.Debug" value="true"/>
</appSettings>
<system.diagnostics>
<trace autoflush="true">
<listeners>
<add
name="textWriterTraceListener"
type="System.Diagnostics.TextWriterTraceListener"
initializeData="logs/InfoDSLog.txt" />
</listeners>
</trace>
</system.diagnostics>
To add an appender for the windows event viewer, try the following in the log4net.xml:
<appender name="EventLogAppender" type="log4net.Appender.EventLogAppender" >
<param name="ApplicationName" value="OPA" />
<param name="LogName" value="OPA" />
<param name="Threshold" value="all" />
<layout type="log4net.Layout.PatternLayout">
<conversionPattern value="%date [%thread] %-5level %logger [%property{NDC}] - %message%newline" />
</layout>
<filter type="log4net.Filter.LevelRangeFilter">
<levelMin value="WARN" />
<levelMax value="FATAL" />
</filter>
</appender>
<root>
<level value="warn"/>
<appender-ref ref="EventLogAppender"/>
</root>
To put the OPA logs under the Application Event Log group, try this:
Create an event source under the Application event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
4.     Right-click the Application subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Close Registry Editor.
To put the OPA logs under a custom OPA Event Log group (as in the demo appender above), try this:
Create an event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the eventlog subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Right-click the new OPA key and add a new DWORD called "MaxSize" and set it to "1400000" which is about 20 Meg in order to keep the log file from getting too large.
7.     The next steps either help or sometimes cause an error, but you can try these next few steps... If you get an error about a source already existing, then you can delete the key.
8.     Right-click the OPA subkey, point to New, and then click Key.
9.     Type OPA for the key name.
10.     Close Registry Editor.
You might need to change permissions so OPA can write to the event log in Registry Editor. If you get permission errors, try following these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the EventLog key, select Permissions.
5.     In the dialog that pops up, click Add...
6.     Click Advanced...
7.     Click Locations... and select the current machine by name.
8.     Click Find Now
9.     Select both the Network user and IIS_IUSERS user and click OK and OK again. (We never did figure out which of those two users was the one that fixed our permission problem.)
10.     Change the Network user to have Full Control
11.     Click Apply and OK
To verify OPA Logging to the windows event logs from Determinations-Server:
Go to the IIS determinations-server application within Server Manager.
Under Manage Application -> Browse Application click the http link to pull up the local "Available Services" web page that show the wsdl endpoints.
Select the /determinations-server/server/soap.asmx?wsdl link
Go to the URL and remove the "?wsdl" from the end of the url and refresh. This will throw the following error into the logs:
ERROR Oracle.Determinations.Server.DSServlet [(null)] - Invalid get request: /determinations-server/server/soap.asmx
That error should show up in the windows event log, OR you can get a message explaining why security stopped you in "logs/InfoDSLog.txt" if you used the web.config settings from above.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
Edited by: Paul Fowler on Feb 21, 2013 9:45 AM

Thanks for sharing this information Paul.

Missing Data from Legacy System

Hello All,
My client went live end of January this year. They had a month of transaction data in their legacy system which they did not bring into SAP. Since this is their first year on SAP and recently implemented Extended Withhold Tax one month data is missing; when they run the 1099s at the end of the year they are going to be reported incorrectly.
How can we bring over that missing data from legacy system over to SAP without having to clear those invoices in SAP?
Thank You In Advance

Hi Shashi,
Have a look : <a href="http://www.box.net/shared/9tda040za6">Transferring Data with DB Connect</a>
<a href="http://sapbwneelam.blogspot.com">More Docs...</a>
Hope it Helps
Srini

How to get the job logs from sm35 by using the queue id and session name?

hi all,
can any one please let me know how to read the job log from sm35 by using the session name and queue id. i have the job name and job count but is it possible to download the job log by using the queue id and session name.
FYI..
i want to read this job log and i want to send it to an email id.
-> i am using the job_open and submitting the zreport via job name and job count and then i am using the function module job_close.
but this is not working in my scenario i have the queue id and session name by using this two i want to get the job log is there any function module available or code please provide me some inputs.
thanks in advance,
koushik

Hi Bharath,
If you want to download it to the local file then you can follow the instructions in the below link.
How to download Batch Input Session Log?
Regards,
Sachin

Missing log from fwsm

Similar Messages

Maybe you are looking for