Syslog files are not processed: Unsupported version (not an attribute), or file does not exist

03/26/2020 1057 7734

DESCRIPTION:
Syslog files are not processed: Error: Unsupported version (not an attribute), or file does not exist: /var/lib/infobright/syslogs/raw_yyyymm.bht/TS000xx.ctb

RESOLUTION:

This article works for Analyzer and GMS, however, only GMS is mentioned in this article.

Customer does not see any reports in application view of GMS anymore. Also, the syslog folder is getting flooded with *.src files. Additionally, following error can be found in brighthouse.log:
2014-10-13 11:06:50 Error: Unsupported version (not an attribute), or file does not exist: /var/lib/infobright/syslogs/raw_201409.bht/TS00033.ctb

In order to troubleshoot and solve the issue, please proceed as follows:
Step 1: Contact SonicWall support and request a root password for your GMS in order to be able to connect via SSH to the UMA of GMS
Step 2: Connect to the UMA using the program WinSCP. The username will be root and the password will be provided by Technical Support. The connection protocol will be SSH.
Step 3: We will use the error message above as an example! In WinSCP, go to /var/lib/infobright/data/syslogs and open the table raw_201409 and look for any files with the naming convention TS*.ctb (such as TS00001.ctb or TS00033.ctb).

Step 4: Delete only the files beginning with TS.
Step 5: Restart the services of GMS and check if the issue is solved and syslog is being processed correctly.