I am having a problem with our rx4640 server running our main ERP oracle database. I am getting HEAPS of + tty?? root-sfmdb logged in the syslog. Below is an example of how many I am getting.
Apr 24 02:44:55 erpprod2 above message repeats 3 times Apr 24 02:57:13 erpprod2 su: + tty?? root-sfmdb Apr 24 02:57:15 erpprod2 su: + tty?? root-sfmdb Apr 24 03:12:16 erpprod2 su: + tty?? root-sfmdb Apr 24 03:12:17 erpprod2 su: + tty?? root-sfmdb Apr 24 03:27:18 erpprod2 su: + tty?? root-sfmdb Apr 24 03:42:21 erpprod2 su: + tty?? root-sfmdb Apr 24 03:44:56 erpprod2 above message repeats 3 times Apr 24 03:57:22 erpprod2 su: + tty?? root-sfmdb Apr 24 03:57:23 erpprod2 su: + tty?? root-sfmdb Apr 24 04:12:24 erpprod2 su: + tty?? root-sfmdb Apr 24 04:12:25 erpprod2 su: + tty?? root-sfmdb Apr 24 04:27:27 erpprod2 su: + tty?? root-sfmdb Apr 24 04:42:30 erpprod2 su: + tty?? root-sfmdb Apr 24 04:44:56 erpprod2 above message repeats 3 times Apr 24 04:57:31 erpprod2 su: + tty?? root-sfmdb Apr 24 04:57:32 erpprod2 su: + tty?? root-sfmdb Apr 24 05:12:33 erpprod2 su: + tty?? root-sfmdb Apr 24 05:12:34 erpprod2 su: + tty?? root-sfmdb Apr 24 05:27:35 erpprod2 su: + tty?? root-sfmdb Apr 24 05:42:39 erpprod2 su: + tty?? root-sfmdb Apr 24 05:44:57 erpprod2 above message repeats 3 times Apr 24 05:57:40 erpprod2 su: + tty?? root-sfmdb Apr 24 05:57:41 erpprod2 su: + tty?? root-sfmdb Apr 24 06:12:42 erpprod2 su: + tty?? root-sfmdb Apr 24 06:12:43 erpprod2 su: + tty?? root-sfmdb Apr 24 06:27:44 erpprod2 su: + tty?? root-sfmdb Apr 24 06:42:47 erpprod2 su: + tty?? root-sfmdb Apr 24 06:44:57 erpprod2 above message repeats 3 times Apr 24 06:57:48 erpprod2 su: + tty?? root-sfmdb Apr 24 06:57:49 erpprod2 su: + tty?? root-sfmdb Apr 24 07:12:51 erpprod2 su: + tty?? root-sfmdb Apr 24 07:12:52 erpprod2 su: + tty?? root-sfmdb Apr 24 07:27:53 erpprod2 su: + tty?? root-sfmdb Apr 24 07:42:56 erpprod2 su: + tty?? root-sfmdb Apr 24 07:44:58 erpprod2 above message repeats 3 times Apr 24 07:57:57 erpprod2 su: + tty?? root-sfmdb Apr 24 07:57:58 erpprod2 su: + tty?? root-sfmdb Apr 24 08:12:59 erpprod2 su: + tty?? root-sfmdb Apr 24 08:13:00 erpprod2 su: + tty?? root-sfmdb Apr 24 08:28:01 erpprod2 su: + tty?? root-sfmdb Apr 24 08:43:05 erpprod2 su: + tty?? root-sfmdb Apr 24 08:44:58 erpprod2 above message repeats 3 times
As you can see they are constant. I have seen articles on how to stop them from coming up but I am concerned that if I do that I will be masking/hiding a problem. Can anyone give me some idea of why these are coming up so often?
One of the other articles I read said to check the cron jobs and below is a listing of the crontab for root. As you will notice there is one job commented out that deals with sfmdb but it seems to make no difference that it is commented out.
# Entry(s) in /opt/hpservices/RemoteSupport are for HP Instant Support Enterprise Edition 0 0 * * 1 /opt/hpservices/RemoteSupport/config/pruneIncidents.sh > /dev/null 2>&1 # Entry for monitoring status of the EMSHAProvider # * * * * * sleep 15;/etc/opt/resmon/lbin/mon_EMSHAProvider_state.sh # 5,20,35,50 * * * * /opt/sfm/bin/restart_sfm.sh # VAEH - Checks for new VA devices every day and sends Install event to ISEE 0 0 * * * /opt/sanmgr/jre/bin/java -classpath ./:/opt/hpservices/contrib/vaeh/lib/util.jar:/opt/hpservices/contrib/vaeh/lib/vaeh.jar:/opt/hpservices/contrib/vaeh/lib/installevent.jar:/opt/hpservices/contrib/vaeh/lib/xerces.jar -DVAEH_ROOT=/opt/hpservices/contrib/vaeh InstallEventGenerator ON # Update COM Catalogue #0 3 * * * /home/oracle/scripts/com/catalogue_update.sh > /home/oracle/scripts/com/catalogue_update.log # 55 23 * * 1-5 /opt/perf/bin/extract -xp -r /home/bfitzpa/zgbltemplate -g -b today 7:00 -e today 18:00 -f stdout | /bin/mailx -s 'svr004 performance report' user@company.com >/tmp/performance.log 2>&1
SFM states "System Fault management" It is the monitoring Application which is loaded in your system and came along with the OS.like event monitoring sevice (EMS)
You can check SFM installed in your system by #swlist -l product |grep SFM
Normally it monitors systems states for each 5 minutes.As you shown root-sfmdb entries are occurred in your syslog.+ indicates it is successfull login to the SFM database.
By removing crontab entries , it may not possible to stop the root-sfmdb entries.I suspects SFM version is not loaded properly on your system.
First you check which SFM version loaded in system.Uninstall the SFM bundles from system using swremove. Before unistalling stop cimserver using cimserver -s command.
