IV07600: UL AGENT FAILS TO RECOGNIZE NEW LOG FILE WHEN IT IS ROTATED USING MV AND TOUCH COMMANDS

IBM Tivoli Monitoring 6.2.2 Fix Pack 8 (6.2.2-TIV-ITM-FP0008)
IBM Tivoli Monitoring 6.2.2 Fix Pack 9 (6.2.2-TIV-ITM-FP0009)

APAR status

• Closed as program error.

Error description

• Environment:
  ITM 6.2.2 Unix Log Agent on Unix machines
  Problem Description:
  UL agent fails to recognize new log file when it is
  rotated using mv and touch commands and it continues to
  monitor the old log file (also if its name has been changed)
  Detailed Recreation Procedure:
  In order to reproduce this issue rotate
  the monitored log file (logfile) using a script like the
  following:
   #!/usr/bin/ksh
   rm logfile.old
   mv logfile logfile.old
   touch logfile
  
  Then if you try to add a new event to the empty
  logfile that should activate a situation, the agent
  doesn't detect it.
  Instead if you add an event to the original log file
  (logfile.old) the agent detects it and the situation fires.
  
  ITM RAS1 logging is not useful for diagnosing this
  issue.
  

Local fix

Problem summary

• UNIX Log agent fails to recognize the new log file when it is
  rotated using mv and touch commands and it continues to monitor
  the old log file (also if its name has been changed).
  

Problem conclusion

• The agent now closes the old file and opens the new one.
  
  The fix for this APAR is going to be included in the following
  maintenance vehicle:
      | fix pack | 6.2.2-TIV-ITM-FP0007
      | fix pack | 6.2.3-TIV-ITM-FP0001
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ITM AGENT UNIX

• Fixed component ID

  5724C04LA

Applicable component levels

• R622 PSY

     UP