CA Spectrum Report Manager fails to insert event into event table

Document ID : KB000017384
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

Spectrum Report Manager (SRM) stops processing events after a failure to insert event into event table.

The root cause is because there are garbage/junk characters in the ciscoLwappMfpAnomalyDetected1 (0x210d37) event.

The following errors are seen in the stdout.log (Windows) or catalina.out (UNIX/Linux) file on the Spectrum Report Manager machine:

(SRM/LandscapeManager/LandscapeThread_0) (SRM_Events) - (ERROR) - Failed to insert event into event table. SQL Exception code: 1366 SQL Exception message: Incorrect string value: '\xF1\x93\xBF\x91' for column 'event_msg' at row 1 Last known event time = 1403941996000
(SRM/LandscapeManager/LandscapeThread_0) (SRM_Events) - (ERROR) - event record (mh=0x13e8ca, type=0x210d37, time=2014-06-28 04:53:17.0)
(SRM/LandscapeManager/LandscapeThread_0) (SRM_Events) - (ERROR) - Database ERROR processing events for domain spectrum1. Will not poll domain

The following event is found after searching for model_handle=0x13e8ca at date/time=2014-06-28 04:53:17:

Figure 1

Solution:

The cLApMacAddress, cLApIfSmtDot11Bssid, and cLClientLastSourceMacAddress objects are OCTET STRING and they are incorrectly configured in Spectrum Event Format File. To correct this issue, change the following on all OneClick systems:

  1. Copy the $SPECROOT/SG-Support/CsEvFormat/Event00210d37_en_US file to $SPECROOT/custom/Events/CsEvFormat/ directory.

  2. Edit the $SPECROOT/custom/Events/CsEvFormat/Event00210d37_en_US file and change as follow:

    From:

    cLApMacAddress = {S 1}
    cLApIfSmtDot11Bssid = {S 3}
    cLClientLastSourceMacAddress = {S 9}

    To:

    cLApMacAddress = {o 1}
    cLApIfSmtDot11Bssid = {o 3}
    cLClientLastSourceMacAddress = {o 9}

  3. Save the file.

  4. Dynamically update Event and Alarm files by clicking on the Reload button of "Update Event and Alarm Files" item in OneClick Administration web page.

  5. Restart the Spectrum Tomcat service on the Spectrum Report Manager system to resume reprocessing the events.

    Event Configuration wizard is another way to make the changes.

    Figure 1