Top
ServerView Resource Orchestrator V3.4.0 Automatic Quarantining Function User's Guide
FUJITSU Software

5.8 [Trend Micro VB] [McAfee] Messages Output in the Event Log of the Resource Orchestrator Manager

In environments where there are multiple Resource Orchestrator managers, the messages output to the event log when antivirus software notifies the first manager of Resource Orchestrator of a security risk are as follow.

UUID:Send information of SNMP trap to remote manager [ip/fqdn] successfully. Request information: [detail]
Level

Information

Source

JSE_SWRC_FJSVRCXMGR

Event ID

217

Description

Transfer of the SNMP trap to the sub manager with the IP address or FQDN indicated in "ip/fqdn" was successful.

For UUID, a UUID assigned to each process is displayed.

Detailed information is displayed in detail.

Corrective Action

No action is necessary.

UUID:Target lserver not found in submanager. ip = [ip].
Level

Warning

Source

JSE_SWRC_FJSVRCXMGR

Event ID

413

Description

There is no L-Server configured with the IP address indicated in the "ip" included in SNMPTrap in the sub manager.

For UUID, a UUID assigned to each process is displayed.

Corrective Action

From the Resource Orchestrator manager, check whether the virtual machine or SBC server that is using the relevant IP address is linked to an L-Server.

When it is linked to the first manager of Resource Orchestrator, corrective action is not necessary.

UUID:No content in avmgr_submgr
Level

Warning

Source

JSE_SWRC_FJSVRCXMGR

Event ID

415

Description

There is no content in the environment definition file.

Corrective Action

When using a configuration in which there are multiple Resource Orchestrator managers, register the information of sub managers using the rcxadm submgr command.

When using a configuration in which there are not multiple Resource Orchestrator managers, delete the following environment definition file.

Installation_folder\SVROR\Manager\etc\conf\avmgr_submgr
UUID:Failed to read remote_ror.rcxprop
Level

Error

Source

JSE_SWRC_FJSVRCXMGR

Event ID

615

Description

Reading of the environment definition file failed.

For UUID, a UUID assigned to each process is displayed.

Corrective Action

Register the information of sub managers using the rcxadm submgr command.

UUID:Argument not Exist
Level

Error

Source

JSE_SWRC_FJSVRCXMGR

Event ID

617

Description

As the argument was not found, collection of information of the machine that was the target of action execution failed.

Settings for notification from OfficeScan or McAfee ePolicy Orchestrator may be incorrect.

For UUID, a UUID assigned to each process is displayed.

Corrective Action

Check the settings for notification from OfficeScan or McAfee ePolicy Orchestrator.

UUID:Failed to access to remote Manager, IP/FQDN:[ip/fqdn]. Detail information:[detail]
Level

Error

Source

JSE_SWRC_FJSVRCXMGR

Event ID

618

Description

Issuing of the API to the sub manager with the IP address or FQDN indicated in "ip/fqdn" failed.

For UUID, a UUID assigned to each process is displayed.

Corrective Action

Perform either of the following corrective actions. However, when there are security risks for which notification was not sent, as the action to be performed automatically will not be performed, perform corrective action manually.

  • Check whether the sub manager is operating normally. If it is not operating, start the sub manager.

  • Check whether the authentication settings for remote management of the first manager are correct. If there are any mistakes in the settings, correct them.

    For details on the settings, refer to [Trend Micro VB Corp] [McAfee] in "2.8 Registering Sub Manager Information".

UUID:Failed to invoke API to ROR Manager. Detail = [Msg]
Level

Error

Source

JSE_SWRC_FJSVRCXMGR

Event ID

619

Description

Issuing of the API to the sub manager failed.

For UUID, a UUID assigned to each process is displayed.

Detailed information is displayed in "Msg".

Corrective Action

Perform one of the following corrective actions. However, when there are security risks for which notification was not sent, as the action to be performed automatically will not be performed, perform corrective action manually.

  • Check whether the information registered for the sub manager is correct. If the information is incorrect, use the rcxadm submgr command to correct the sub manager information.

    For details on the rcxadm submgr command, refer to "4.7 rcxadm submgr".

  • The name of the FQDN registered for the sub manager cannot be resolved. Take corrective action, such as registering it in the hosts file, etc., to enable resolution of the name.

  • Check whether the sub manager is operating normally. If it is not operating, start the sub manager.

UUID:Failed to invoke API to ROR Manager for 3 times. Detail = [Msg]
Level

Error

Source

JSE_SWRC_FJSVRCXMGR

Event ID

631

Description

Issuing of the API to the sub manager failed.

For UUID, a UUID assigned to each process is displayed.

Detailed information is displayed in "Msg".

Corrective Action
  • Check whether the information registered for the sub manager is correct.
  • Check whether the sub manager is operating normally.