Previous Topic: The Text File Log Sensor Running on a Solaris Agent System Stops Receiving Events

Next Topic: Appliance (non-UI)

Very High Event Flow Causes the Agent to Become Unresponsive

Symptom:

A CA Enterprise Log Manager agent becomes unresponsive and stops accepting events. The following error message appears in the caelmdispatcher.log file:

[275] 07/12/10 14:32:05 ERROR :: FileQueue::PutEvents Unable to write to new event file
[275] 07/12/10 14:32:05 ERROR :: WriterThread::run Unable to push events to FileQueue, Retrying
[275] 07/12/10 14:32:10 NOTIFY :: FileQueue::UpdateCurrentWriterFile Reached Max files configured limit=10, Not creating any new files for now

Solution:

This indicates that there is a very high rate of incoming events for the hardware in the environment. You can address this issue by reconfiguring the agent, using the following procedure:

  1. Click Administration, the Log Collection subtab, and expand the Agent Explorer folder.
  2. Select the agent you want to reconfigure, click Edit, and adjust the following parameters:

    You can adjust these parameters upwards as required by your environment and event per second rate.

More information:

Configure an Agent


Copyright © 2010 CA. All rights reserved. Email CA about this topic