Environment
Novell Audit 2.0.2
Novell Audit 2.0.1
Novell Audit 2.0.0
Novell Audit 1.0.3Situation
The Secure Logging Server has been down.
There is a large cache file on the platform agent
server.
LCache.exe on Windows will display a message "Agent already
running"
The various instrumentations may attempt to connect, but
errors report that the instrumentation is not able to
connect.
Resolution
The Lcache module (lcache.nlm, lcache.exe, lcache) will go out
and look for any existing cache files. If lcache finds an
existing cache file, it will verify the data in the cache file and
then upload the data in the file to the Secure Logging Server
(SLS). If the cache file is large (200+ MB in size), it can
take some time for Lcache to validate the cache file. The
error message that you receive in Windows "Agent already running",
is normal.
WORKAROUNDS:
If you do not want your instrumentation to connect up, you can
load lcache and allow lcache to perform the file check and then
upload the data. If you do not mind missing the data, you can
delete the cache files (lcache will need to be unloaded) and then
restart lcache.