7 Replies Latest reply on Nov 14, 2019 9:37 AM by hemanathan

    Syslog stops logging with no notification

    ttl

      I discovered this morning (only because I didn't receive the nightly report) that two of our Syslog servers stopped logging yesterday afternoon. The nightly archiving and cleanup jobs did not run. The service did not crash. The drive has 63 GB of free space. There are no entries under the Application or System logs in Windows. Under the Errorlog I see this for all of the reporting nodes ("ip.address.#" is placeholder for the actual values in the logs):

       

      2015-05-28 15:38:59    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:38:59    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:38:59    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\Firewalls\ip.address1.txt

      2015-05-28 15:39:00    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:00    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:00    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\Firewalls\ip.address.1..txt

      2015-05-28 15:39:02    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:02    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:02    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\Firewalls\ip.address.2.txt

      2015-05-28 15:39:03    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:03    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:03    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\ESX\ip.address.3.txt

      2015-05-28 15:39:03    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:03    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:03    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\Firewalls\ip.address.1.txt

      2015-05-28 15:39:06    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:06    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:06    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\Firewalls\ip.address.1.txt

      2015-05-28 15:39:07    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:07    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:07    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\ESX\ip.address.4.txt

      2015-05-28 15:39:08    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:08    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:08    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\Firewalls\ip.address.1.txt

      2015-05-28 15:39:11    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:11    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:11    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\Firewalls\ip.address.1.txt

      2015-05-28 15:39:16    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:16    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\Firewalls\ip.address.1.txt

      2015-05-28 15:39:16    Log to file action - Error: Win32File Object [45600] Unknown error.

      2015-05-28 15:39:16    Log to file action - Error: FlushCacheLines <Encoding_Failed> - File: E:\Syslogs\ESX\ip.address.5.txt

       

           The log stops there. When I restart the service I see these additional entries in the Error log:

       

      2015-05-29 07:17:16    Unable to open InterApp listening socket on TCP port 3300

      2015-05-29 07:17:16    Unable to open UDP socket on port 514

      2015-05-29 07:19:08    Service running, but Service/Manager comm link is not connecting.

      2015-05-29 07:19:28    Unable to connect to Service socket on TCP port 3300

      2015-05-29 07:19:38    Service running, but Service/Manager comm link is not connecting.

       

      Any ideas?