CIFS审核暂存卷已满、因为接管交还后未启动adtconsolidation过程
适用场景
- ONTAP 9
- CIFS审核
问题描述
- 出现的一些症状如下:
- 在ONTAP升级期间执行任何接管/恢复操作后、未报告任何审核日志。
- 某些暂存卷的容量已达到全满。
- EMS日志:
[?] Wed Aug 29 07:34:57 BST [cluster-2: wafl_exempt04: wafl.vol.full:notice]: Insufficient space on volumeMDV_aud_fdb78598bd5945ffa6f7bd1197a9f975@vserver:7a9e6a27-aa87-11e6-96cc-00a098a91817 to perform operation. 4.00KB was requested but only 1.00KB was available.
[?] Wed Aug 29 07:34:57 BST [cluster-2: AuditWorkerThread02: adt.stgvol.nospace:EMERGENCY]:Audit subsystem internal error: Staging volume MDV_aud_fdb78598bd5945ffa6f7bd1197a9f975 is full.
[?] Wed Aug 29 07:59:30 BST [cluster-2: AuditWorkerThread00: ems.engine.suppressed:debug]: Event 'adt.stgvol.nospace' suppressed 90 times in last 1397seconds.
[?] Wed Aug 29 07:59:30 BST [cluster-2: AuditWorkerThread00: adt.stgvol.nospace:EMERGENCY]: Audit subsysteminternal error: Staging volume MDV_aud_fdb78598bd5945ffa6f7bd1197a9f975 is full.
::> df MDV*
Filesystem kbytes used avail capacity Mounted on
/vol/MDV_aud_4a9d8065eac9454bbe042ffddd0df645/ 1992296 532 1991764 0% /vol/MDV_aud_4a9d8065eac9454bbe042ffddd0df645/
/vol/MDV_aud_62a9aebc8f3d4fe2990e39bb34c66999/ 1992296 384 1991912 0% /vol/MDV_aud_62a9aebc8f3d4fe2990e39bb34c66999/
/vol/MDV_aud_fdb78598bd5945ffa6f7bd1197a9f975/ 1992296 1992296 0 100% /vol/MDV_aud_fdb78598bd5945ffa6f7bd1197a9f975/ <<<<<< Full
/vol/MDV_aud_d63c9c461ab14609928999846af40f90/ 1992296 192 1992104 0% /vol/MDV_aud_d63c9c461ab14609928999846af40f90/
/vol/MDV_aud_a38d6a453935479d8e0a5a5413f986c3/ 1992296 204 1992092 0% /vol/MDV_aud_a38d6a453935479d8e0a5a5413f986c3/
- 禁用审核失败:
::*> vserver audit disable -vserver svm01
Error: command failed: Failed to disable auditing for Vserver "svm01". Reason: Audit consolidation job not present for the Vserver and one of the possible reasons might be snapmirror break operation in Vserver DR setup. Retry after some time.