IBM Support

IBM Security Guardium and Hadoop Apache Ranger Integration DAM traffic collection throws an exception: "exception accepting client: Too many open files"

Troubleshooting


Problem

When you try to perform DAM (Database Activity Monitoring) of a Hadoop server, the S-TAP might start to write numerous exceptions to its log file, suggesting a potential problem that could not allow to properly process all the DAM traffic.

log4j::ReaderWorker::readerWorker(): exception accepting client: Too many open files

Note 1. If your S-TAP was installed by using the Guardium Installation Manager (GIM) module, the log file can be found at the <GIM_installation_prefix>/guardium/modules/STAP/current/STAP.log path.
The string <GIM_installation_prefix> must be replaced with the folder where you installed GIM.
Note 2. If your S-TAP was installed by using the interactive shell script, the log file can be found at the same folder where the S-TAP was installed.

Additionally, you might notice other error messages in the "/tmp/guard_stap.stderr.txt" file.

Error Reading client XxXXXXXXXXXX: Connection reset by peer.

Symptom

  • You suspect that there is some DAM traffic being lost.
  • Lots of exceptions are logged by the S-TAP.
     

Document Location

Worldwide

[{"Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z000000Gp0IAAS","label":"STAP"}],"ARM Case Number":"TS003753096","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
25 March 2021

UID

ibm16333585