HP-UX 11.11 event.log not updated

[Michael01]

On server running HPUX 11.11 with mirrored disks in MSA30 0disk array, mirrored disk has been replaced hot-plug. After this no entries are written to event.log.

[Bill Hassell]

STM is probably not installed correctly or not running.

Check with a simple cstm query for memory:

echo "selclass qualifier memory;info;wait;infolog" | /usr/sbin/cstm

Also check:

/etc/opt/resmon/lbin/monconfig

to see if EMS is running and configured to log to the event.log file.

[Michael01]

Hello,

thanks for the answer. But before disk replacement was performed, infos were written to event.log. Below you can find the last info written to event .log and the corresponding entries in syslog.log:since that time:

last entry in event.log :
**** snip ****
>------------ Event Monitoring Service Event Notification ------------<

Notification Time: Fri Oct 30 09:17:22 2015

slsm7c sent Event Monitor notification information:

/adapters/events/raid_adapter/0_2_1_0_4_0 is >= 1.
Its current value is INFORMATION(1).

Event data from monitor:

Event Time..........: Fri Oct 30 09:17:22 2015
Severity............: INFORMATION
Monitor.............: dm_raid_adapter
Event #.............: 13
System..............: slsm7c

Summary:
Adapter at hardware path 0/2/1/0/4/0 : CISS: Detected insertion of
physical disk.

Description of Error:

lbolt value: 58234145

CISS: Detected insertion of physical disk.

SCSI Bus: 2
SCSI ID: 1
Size: 146811
Enclosure Bay: 9
Configured: YES
Hot Spare: NO
Drive Model: COMPAQ BF1468B26B
Drive FW Revision: HPB9

Probable Cause / Recommended Action:

This event occurs as part of the normal operation. No action is required.

Additional Event Data&colon;
System IP Address...: 172.23.81.162
Event Id............: 0x5633279200000000
Monitor Version.....: B.01.00
Event Class.........: I/O
Client Configuration File...........:
/var/stm/config/tools/monitor/default_dm_raid_adapter.clcfg
Client Configuration File Version...: A.01.00
Qualification criteria met.
Number of events..: 1
Associated OS error log entry id(s):
0x5633279200000000
Additional System Data&colon;
System Model Number.............: 9000/800/rp4440
OS Version......................: B.11.11
EMS Version.....................: A.04.20
STM Version.....................: A.68.00
Latest information on this event:
http://docs.hp.com/hpux/content/hardware/ems/dm_raid_adapter.htm#13

v-v-v-v-v-v-v-v-v-v-v-v-v D E T A I L S v-v-v-v-v-v-v-v-v-v-v-v-v

I/O Log Event Data&colon;

Driver Status Code..................: 0x0000000D
Length of Logged Hardware Status....: 0 bytes.
Offset to Logged Manager Information: 0 bytes.
Length of Logged Manager Information: 120 bytes.

Manager-Specific Information:

Raw data from the SCSI RAID SA Controller CISS driver:
00000004 03789521 00000001 01000900 02010000 00023D7B 434F4D50 41512020
42463134 36384232 36422020 20202020 00000000 00000000 00000000 00000000
334C4E37 4D5A3947 30303030 39303038 594D4631 00000000 00000000 00000000
00000000 00000000 48504239 00000000 00000000 00000000

>---------- End Event Monitoring Service Event Notification ----------<
**** snap ****
entries in syslog.log
**** snip ****
Oct 30 09:15:57 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected the removal
....
Oct 30 09:15:57 slsm7c vmunix: Channel: 2
Oct 30 09:15:56 slsm7c su: + tty?? root-root
Oct 30 09:15:57 slsm7c above message repeats 15 times
Oct 30 09:15:57 slsm7c vmunix: SCSI ID: 1
Oct 30 09:15:57 slsm7c vmunix: Enclosure Bay: 9
Oct 30 09:15:57 slsm7c vmunix: Configured: Yes
Oct 30 09:15:57 slsm7c vmunix: Hot Spare: No
Oct 30 09:15:57 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a physical
Oct 30 09:15:57 slsm7c vmunix: disk failure:
Oct 30 09:15:57 slsm7c vmunix: Channel: 2
Oct 30 09:15:57 slsm7c vmunix: SCSI ID: 1
Oct 30 09:15:57 slsm7c vmunix: Failure Reason: REMOVED IN HOT PLUG
Oct 30 09:15:57 slsm7c vmunix: Enclosure Bay: 9
Oct 30 09:15:57 slsm7c vmunix: Configured: Yes
Oct 30 09:15:57 slsm7c vmunix: Hot Spare: No
Oct 30 09:15:57 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a logical
Oct 30 09:15:57 slsm7c vmunix: drive status change:
Oct 30 09:15:57 slsm7c vmunix: Logical drive 0 transitioned from OK to INTERIM RECOVERY
Oct 30 09:15:57 slsm7c vmunix: Drive type: RAID 1+0 - Disk Mirroring
....
Oct 30 09:17:22 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected an insertion
.....
Oct 30 09:17:22 slsm7c vmunix: of a physical disk:
Oct 30 09:17:22 slsm7c above message repeats 6 times
Oct 30 09:17:22 slsm7c vmunix: Channel: 2
Oct 30 09:17:21 slsm7c su: + tty?? root-root
Oct 30 09:17:22 slsm7c above message repeats 34 times
Oct 30 09:17:22 slsm7c vmunix: SCSI ID: 1
Oct 30 09:17:22 slsm7c vmunix: Size: 146811 MB
Oct 30 09:17:22 slsm7c vmunix: Enclosure Bay: 9
Oct 30 09:17:22 slsm7c vmunix: Configured: Yes
Oct 30 09:17:22 slsm7c vmunix: Hot Spare: No
Oct 30 09:17:22 slsm7c vmunix: Disk Model: COMPAQ BF1468B26B
Oct 30 09:17:22 slsm7c vmunix: Disk FW Revision: HPB9
Oct 30 09:17:22 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a logical
Oct 30 09:17:22 slsm7c vmunix: drive status change:
Oct 30 09:17:22 slsm7c vmunix: Logical drive 0 transitioned from INTERIM RECOVERY to READY FOR RECOVERY
Oct 30 09:17:22 slsm7c vmunix: Drive type: RAID 1+0 - Disk Mirroring
Oct 30 09:17:22 slsm7c vmunix: Logical drive 0 transitioned from READY FOR RECOVERY to RECOVERING
Oct 30 09:17:22 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a logical
Oct 30 09:17:26 slsm7c su: + tty?? root-root
Oct 30 09:17:22 slsm7c vmunix: drive status change:
......
Oct 30 09:17:22 slsm7c vmunix: Drive type: RAID 1+0 - Disk Mirroring
Oct 30 09:18:14 slsm7c inetd[25814]: registrar/tcp: Connection from slsm7c (172.23.81.162) at Fri Oct 30 09:18:14 2015
......
Oct 30 09:19:02 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected the removal
Oct 30 09:18:52 slsm7c su: + tty?? .....
Oct 30 09:19:02 slsm7c above message repeats 2 times
Oct 30 09:19:02 slsm7c vmunix: of a physical disk:
Oct 30 09:18:54 slsm7c su: + tty?? .....
Oct 30 09:19:02 slsm7c above message repeats 19 times
Oct 30 09:19:02 slsm7c vmunix: Channel: 2
Oct 30 09:19:00 slsm7c su: + tty?? root-root
Oct 30 09:19:02 slsm7c above message repeats 51 times
Oct 30 09:19:02 slsm7c vmunix: SCSI ID: 1
Oct 30 09:19:02 slsm7c vmunix: Enclosure Bay: 9
Oct 30 09:19:02 slsm7c vmunix: Configured: Yes
Oct 30 09:19:02 slsm7c vmunix: Hot Spare: No
Oct 30 09:19:02 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a physical
Oct 30 09:19:02 slsm7c vmunix: disk failure:
Oct 30 09:19:02 slsm7c vmunix: Channel: 2
Oct 30 09:19:02 slsm7c vmunix: SCSI ID: 1
Oct 30 09:19:02 slsm7c vmunix: Failure Reason: REMOVED IN HOT PLUG
Oct 30 09:19:02 slsm7c vmunix: Enclosure Bay: 9
Oct 30 09:19:02 slsm7c vmunix: Configured: Yes
Oct 30 09:19:02 slsm7c vmunix: Hot Spare: No
Oct 30 09:19:02 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a logical
Oct 30 09:19:02 slsm7c vmunix: drive status change:
Oct 30 09:19:02 slsm7c vmunix: Logical drive 0 transitioned from RECOVERING to INTERIM RECOVERY
Oct 30 09:19:02 slsm7c vmunix: Drive type: RAID 1+0 - Disk Mirroring
Oct 30 09:19:04 slsm7c su: + tty?? .....
Oct 30 09:19:05 slsm7c su: + tty?? .....
Oct 30 09:19:06 slsm7c su: + tty?? .....
Oct 30 09:19:20 slsm7c su: + tty?? .....
Oct 30 09:19:07 slsm7c su: + tty?? .....
Oct 30 09:19:34 slsm7c su: + tty?? .....
Oct 30 09:19:47 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected an insertion
Oct 30 09:19:33 slsm7c su: + tty?? ......
Oct 30 09:19:47 slsm7c above message repeats 5 times
Oct 30 09:19:47 slsm7c vmunix: of a physical disk:
Oct 30 09:19:35 slsm7c su: + tty?? ......
Oct 30 09:19:47 slsm7c vmunix: Channel: 2
Oct 30 09:19:46 slsm7c su: + tty?? root-root
Oct 30 09:19:47 slsm7c above message repeats 22 times
Oct 30 09:19:47 slsm7c vmunix: SCSI ID: 5
Oct 30 09:19:47 slsm7c vmunix: Size: 146811 MB
Oct 30 09:19:47 slsm7c vmunix: Enclosure Bay: 13
Oct 30 09:19:47 slsm7c vmunix: Configured: No
Oct 30 09:19:47 slsm7c vmunix: Hot Spare: No
Oct 30 09:19:47 slsm7c vmunix: Disk Model: COMPAQ BF1468B26B
Oct 30 09:19:47 slsm7c vmunix: Disk FW Revision: HPB9
Oct 30 09:19:50 slsm7c su: + tty?? root-root
Oct 30 09:19:51 slsm7c su: + tty?? root-....
Oct 30 09:19:52 slsm7c su: + tty?? root-.....
Oct 30 09:19:57 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected the removal
Oct 30 09:19:51 slsm7c su: + tty?? root-......
Oct 30 09:19:57 slsm7c above message repeats 3 times
Oct 30 09:19:57 slsm7c vmunix: of a physical disk:
Oct 30 09:19:57 slsm7c vmunix: Channel: 2
Oct 30 09:19:55 slsm7c su: + tty?? root-root
Oct 30 09:19:57 slsm7c above message repeats 2 times
Oct 30 09:19:57 slsm7c vmunix: SCSI ID: 5
Oct 30 09:19:57 slsm7c vmunix: Enclosure Bay: 13
Oct 30 09:19:57 slsm7c vmunix: Configured: No
Oct 30 09:19:57 slsm7c vmunix: Hot Spare: No
Oct 30 09:19:57 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a physical
Oct 30 09:19:57 slsm7c vmunix: disk failure:
Oct 30 09:19:57 slsm7c vmunix: Channel: 2
Oct 30 09:19:57 slsm7c vmunix: SCSI ID: 5
Oct 30 09:19:57 slsm7c vmunix: Failure Reason: REMOVED IN HOT PLUG
Oct 30 09:19:57 slsm7c vmunix: Enclosure Bay: 13
Oct 30 09:19:57 slsm7c vmunix: Configured: No
Oct 30 09:19:57 slsm7c vmunix: Hot Spare: No
Oct 30 09:20:01 slsm7c su: + tty?? root-root
Oct 30 09:20:04 slsm7c su: + tty?? root-.....
Oct 30 09:20:06 slsm7c su: + tty?? root-.....
Oct 30 09:20:14 slsm7c inetd[2565]: registrar/tcp: Connection from slsm7c (172.23.81.162) at Fri Oct 30 09:20:14 2015
Oct 30 09:21:27 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected an insertion
Oct 30 09:21:07 slsm7c su: + tty?? root-.....
Oct 30 09:21:28 slsm7c above message repeats 6 times
Oct 30 09:21:27 slsm7c vmunix: of a physical disk:
Oct 30 09:21:19 slsm7c su: + tty?? root-root
Oct 30 09:21:28 slsm7c above message repeats 30 times
Oct 30 09:21:27 slsm7c vmunix: Channel: 2
Oct 30 09:21:21 slsm7c su: + tty?? root-.....
Oct 30 09:21:28 slsm7c above message repeats 20 times
Oct 30 09:21:27 slsm7c vmunix: SCSI ID: 1
Oct 30 09:21:27 slsm7c vmunix: Size: 146811 MB
Oct 30 09:21:27 slsm7c vmunix: Enclosure Bay: 9
Oct 30 09:21:27 slsm7c vmunix: Configured: Yes
Oct 30 09:21:27 slsm7c vmunix: Hot Spare: No
Oct 30 09:21:27 slsm7c vmunix: Disk Model: COMPAQ BF1468B26B
Oct 30 09:21:27 slsm7c vmunix: Disk FW Revision: HPB9
Oct 30 09:21:28 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a logical
Oct 30 09:21:28 slsm7c vmunix: drive status change:
Oct 30 09:21:28 slsm7c vmunix: Logical drive 0 transitioned from INTERIM RECOVERY to READY FOR RECOVERY
Oct 30 09:21:28 slsm7c vmunix: Drive type: RAID 1+0 - Disk Mirroring
Oct 30 09:21:28 slsm7c vmunix: Logical drive 0 transitioned from READY FOR RECOVERY to RECOVERING
Oct 30 09:21:28 slsm7c vmunix: CISS: RAID SA controller on hardware path 0/2/1/0/4/0 has detected a logical
Oct 30 09:21:31 slsm7c su: + tty?? root-root
Oct 30 09:21:28 slsm7c vmunix: drive status change:
Oct 30 09:21:33 slsm7c su: + tty?? root-......
Oct 30 09:21:34 slsm7c su: + tty?? root-......
Oct 30 09:21:28 slsm7c vmunix: Drive type: RAID 1+0 - Disk Mirroring
Oct 30 09:22:14 slsm7c inetd[8912]: registrar/tcp: Connection from slsm7c (172.23.81.162) at Fri Oct 30 09:22:14 2015
Oct 30 09:23:32 slsm7c su: + tty?? root-......

**** snap ****

As you can see from syslog.log, disk was removed and inserted after the time the last info was writen to event.log.