ipoGenServiceFailureSvcEvent Alarm Missing Alarm Object

Description:A ipoGenServiceFailureSvcEvent notification is generated whenever a Service component fails in its operation. It signifies that the SNMP entity, acting in an agent role, has detected that the state of a Service component has transitioned from the operational to the failed state

Related Articles: https://unix.stackexchange.com/questions/245316/rsyslogd-huped-repeatedly

Problem Clarification: Receiving ipoGenServiceFailureSvcEvent alert without an alarm object - Note if alarm is received with alarm object, please follow normal troubleshooting procedure

Cause: IP Office is generating logs that coincide with this alarm in logs archived in 7071 interface.  They can be found in system_logs_2024_*date/time*.  Directory var/log/ with log name "messages-20240702" or similar.  Near the bottom of log, the alarm without alarm object is generated it appears to be a HUP message, normal operation for writing new files if present.

"There's nothing to fix. This is normal operation. When the logfile is rotated by logrotate, it tells rsyslog to close and re-open its logfile file handles by sending it a HUP signal.

If rsyslog doesn't do that, then it will continue to write its log output to the OLD logfiles, not to the new ones because the file handles will still connect to the old files."

<5> 2024 Jun 30 00:01:02 ipo-primary-server kernel: type=1400 audit(1719720062.166:2667): avc: denied { ioctl } for pid=21080 comm="gzip" path="/usr3/Avaya/MediaServer/log/system.log-20240630.gz" dev=sda3 ino=4448283 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file
<46> 2024 Jun 30 00:01:02 ipo-primary-server rsyslogd: [origin software="rsyslogd" swVersion="8.12.0" x-pid="21868" x-info="http://www.rsyslog.com"] rsyslogd was HUPed

Solution: Office is generating logs that coincide with this alarm in logs archived in 7071 interface.  They can be found in system_logs_2024_*date/time*.  Directory var/log/ with log name "messages-20240702" or similar.  Near the bottom when the alarm is generated it appears to be a HUP message, normal operation for writing new files if present.
 
"There's nothing to fix. This is normal operation. When the logfile is rotated by logrotate, it tells rsyslog to close and re-open its logfile file handles by sending it a HUP signal.
 
If rsyslog doesn't do that, then it will continue to write its log output to the OLD logfiles, not to the new ones because the file handles will still connect to the old files."
 

 2024 Jun 30 00:01:02 ipo-primary-server kernel: type=1400 audit(1719720062.166:2667): avc: denied { ioctl } for pid=21080 comm="gzip" path="/usr3/Avaya/MediaServer/log/system.log-20240630.gz" dev=sda3 ino=4448283 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file
<46> 2024 Jun 30 00:01:02 ipo-primary-server rsyslogd: [origin software="rsyslogd" swVersion="8.12.0" x-pid="21868" x-info="http://www.rsyslog.com"] rsyslogd was HUPed

Manufacturer Release notes:n/a

Disclaimer: intlx Solutions Knowledge Base

The information contained in this knowledge base ("Content") is provided for informational purposes only and is intended to be a general resource. intlx Solutions does not guarantee the accuracy, completeness, or timeliness of the Content.

Use at Your Own Risk: By accessing and using the Content, you agree that you do so at your own risk. intlx Solutions assumes no responsibility for any errors or omissions in the Content, nor for any damages or losses you may suffer arising out of or related to the use of the Content.

Current Customers: If you are a current intlx Solutions customer and have questions or require further clarification on any information presented here, please do not hesitate to contact our support team directly. They are available to assist you and ensure you have the most up-to-date information specific to your needs.

Not a Customer? If you are not currently an intlx Solutions customer but are interested in learning more about our solutions and how we can help your business, please click here. We look forward to the opportunity to discuss your needs and explore how a partnership with intlx Solutions can benefit you.

Thank you for your understanding.