由于没有可用缓冲区空间、ONTAP报告"审核错误"
适用场景
ONTAP 9.7P10或更高版本
问题描述
由于No buffer space available ，ONTAP报告Auditing error ：
- 检测到SNMP陷阱：
2024/11/20 22:00:34 .1.3.6.1.4.1.789.0.16 Normal "Status Events" 10.254.11.111 - .1.3.6.1.4.1.789.0.16 enterprises.789.0.16 A user-defined trap meant to provide notification, audit.log.event:Auditing error (Audit messages started to drop. Reason = No buffer space available) occurred at 2024-11-20 22:00:33. 1-80-0000112024/11/20 22:00:34 .1.3.6.1.4.1.789.0.16 Normal "Status Events" 10.254.11.111 - .1.3.6.1.4.1.789.0.16 enterprises.789.0.16 A user-defined trap meant to provide notification, audit.log.event:Auditing error (Audit messages transmission resumed.) occurred at 2024-11-20 22:00:33. 1-80-000011注意：
.1.3.6.1.4.1.789.0.16表示陷阱是通知陷阱 (在netapp.mib中定义为通知类型)10.254.11.111是发出此请求的节点的管理LIF的IP地址。- EMS日志报告的内容相同：
[?] Wed Nov 20 22:00:33 +0000 [node1: mgwd: audit.log.event:notice]: Auditing error (Audit messages started to drop. Reason = No buffer space available) occurred at 2024-11-20 22:00:33.[?] Wed Nov 20 22:00:33 +0000 [node1: mgwd: audit.log.event:notice]: Auditing error (Audit messages transmission resumed.) occurred at 2024-11-20 22:00:33.- AutoSupport (ASUP)->
AUDIT-MLOG-TXT.GZ日志 报告的内容相同：
0000001d.180223b6 3e0a922b Wed Nov 20 2024 22:00:33 +00:00 [kern_audit:info:2108] 1 audit messages dropped from 2024-11-20 22:00:33 to 2024-11-20 22:00:33. Last failure reason = No buffer space available