Top
ServerView Resource Orchestrator V3.4.0 Automatic Quarantining Function User's Guide
FUJITSU Software

5.1 Messages Output during Execution of the rcxadm avmgr Command

Information

No changes have been made to the explanations of messages output during the changing of the connection destination network of a virtual L-Server as a result of execution of the rcxadm avmgr quarantine or rcxadm avmgr unquarantine commands.

21143

FJSVrcx:INFO: 21143:L-Server_name:quarantine L-Server:started

Description

The process of transferring the L-Server (L-Server_name) to the quarantine network has been started.

Corrective Action

No action is necessary.

21144

FJSVrcx:INFO: 21144 L-Server_name:quarantine L-Server:completed

Description

The process of transferring the L-Server (L-Server_name) to the quarantine network has been completed.

Corrective Action

No action is necessary.

21171

FJSVrcx:INFO: 21171:security event occurred.detail

Description

A security event has been sent to Resource Orchestrator.

In detail, the following information is displayed.

Corrective Action

Take corrective action based on the content output for detail.

For mgmt_soft_name=the_identifier_of_the_antivirus_software oid=the_identifier_of_the_SNMP_trap_agent st=the_identifier_specific_to_the_SNMP_trap_device data=the_raw_data_received_from_the_SNMP_trap_agent

Corrective action is only necessary in the following case.

  • When tuning is necessary for the security risks that are the targets of quarantining, based on the content of "data" in this message (which is output to the system log), modify the definition files of keywords for exclusion from the targets of quarantining or the definition files of keywords for the targets of quarantining.
21180

FJSVrcx:INFO:21180:obj:function was performed

Description

The processing of the function for obj has been performed.

The name of the L-Server is displayed in obj.

  • When "message notifying of disconnect" is displayed for function

    A message was sent to the user when the L-Server was connected to the quarantine network.

  • When "email notifying of disconnect" is displayed for function

    When an action is executed on an L-Server upon detection of a malware infection, the tenant administrator is notified by email.

Corrective Action

No action is necessary.

41123

FJSVrcx:WARNING:41123:obj:function was aborted. detail=detail

Description

The processing of the function for obj has not been performed.

L-Server_name is displayed in obj.

The reason the processing of function was not performed is displayed for detail.

  • When "message notifying of disconnect" is displayed for function

    When executing an action upon detection of a malware infection on an L-Server, no notification message was sent to the user.

  • When "email notifying of disconnect" is displayed for function

    When executing an action upon detection of a malware infection on an L-Server, no notification message was sent to the tenant administrator.

Corrective Action
  • When "message notifying of disconnect" is displayed for function

    Processing of a VDI management server remote command failed. There are the following possibilities:

    • There is no connection information configured for the VDI management server, or there is a mistake in the connection information
    • The VDI management server is not operating correctly
    • The network settings of the VDI management server are incorrect

    Check the connection information, operating status, and network settings of the VDI management server.

  • When "email notifying of disconnect" is displayed for function

    Processing of an SMTP server remote command failed.

    Check the connection information, operating status, and network settings of the SMTP server.

When the cause is not one of the above, collect troubleshooting data, and contact Fujitsu technical staff.

67153

FJSVrcx:ERROR:67153:obj: already exists

Description

The specified object obj already exists.

One of the following messages is displayed in obj.

  • When obj is "Antivirus software"

    An antivirus software resource with the same name already exists.

  • When obj is an IP address or an FQDN

    If this message is displayed during operation of information for sub manager coordination, manager information already exists.

Corrective Action

Change the name of the object to be created, or delete the existing obj and then perform the operation again.

In any other cases, take corrective action based on the content of obj.

  • When obj is "Antivirus software"

    Either change the resource name of the antivirus software resource to register or delete the already registered antivirus software, and then perform the operation again.

  • When obj is an IP address or an FQDN

    If this message is displayed when operating information for sub manager coordination, change the IP address or FQDN if necessary, and then perform the operation again.

67154

FJSVrcx:ERROR:67154:obj:not found

Description

After checking the following for the displayed object, perform the operation again.

  • That the object exists
  • That the object was not deleted during deletion processing

If this error is displayed when a command is executed, check the following.

Corrective Action
If this message is displayed when a command was executed

There is a chance that the resource type of the specified object name differs from the resource type that can be specified for the command argument.

Check the resource type of the specified object and then perform the operation again.

The name of the specified object is displayed for obj.

The object name is displayed as follows.

  • When operating information for sub manager coordination
    • An IP address or an FQDN
  • When the object is an antivirus software
    • The resource name of the target antivirus software
67198

FJSVrcx:ERROR:67198:command execution error.detail

Description

An error has occurred during execution of a manager command.

In detail, the following information is displayed.

Take corrective action based on the content output for detail.

Corrective Action
For "quarantine failed(detail=detail)"

Take corrective action based on the content output for detail.

"L-Server not found. ip=IP_address"

The L-Server for which the IP address of the SNMP trap or REST API has been set was not found.

Check whether linking of the virtual machine or SBC server using this IP address with the L-Server is complete.

In configurations where there are multiple Resource Orchestrator managers, check the following:

  • Check whether the 413 warning message "Target lserver not found in submanager." has been output in the system log of the first manager of Resource Orchestrator.

    If the 413 warning message has not been output, no corrective action is necessary.

  • Check whether the L-Server is being managed using another sub manager.

    If it is being managed using another sub manager, check whether the information for sub manager coordination is configured correctly.

    If "submgr:Resource_Orchestrator_manager_IP_address_or_FQDN" is included in detail, the message can be ignored.

"Two or more L-Server found. ip=IP_address,lserver_key=["Resource_ID", "Resource_ID",...]"

Multiple L-Servers for which the IP address of the SNMP trap or REST API has been set were found.

Environments in which multiple L-Servers are configured with the same IP address for reasons such as tenants are being used, are not supported.

Only use an IP address for one virtual L-Server.

"already registered"

No corrective action is necessary as registration is already complete.

"Other error messages (FJSVrcx:ERROR:xxxx)"

An error occurred during the modification of the L-Server performed during the transfer process of the L-Server to the quarantine network.

Take corrective action explained for the corresponding error message in "Messages".

In configurations where there are multiple Resource Orchestrator managers, check the following, connect to the manager where the problem occurred, and perform corrective action based on the error message.

  • When "submgr:Resource_Orchestrator_manager_IP_address_or_FQDN" is included in detail

    A problem has occurred on the Resource Orchestrator manager corresponding to the IP address or the FQDN.

  • When "submgr:Resource_Orchestrator_manager_IP_address_or_FQDN" is not included in detail

    A problem has occurred on the first manager of Resource Orchestrator.

67280
FJSVrcx:ERROR:67280:obj:function not supported. detail
Description

obj does not support function.

In function, the name of the function that is not supported is displayed.

When function can be used with certain conditions, detailed information is displayed in the following function or detail.

In cases other than the following, this message is displayed when you attempt to use a function that cannot be used by obj. No action is necessary.

Corrective Action
When "modify network" is displayed for function, and "not linked physical-lserver" is displayed for detail

Refer to "2.13 Linking Physical L-Servers with Configured SBC Servers", and perform linking.

67295

FJSVrcx:ERROR:67295:obj:duplicate resource name found

Description
Corrective Action
When registering or modifying an antivirus software

In Resource Orchestrator, only one resource can use the same combination of IP address and antivirus software identifier.

Change the IP address specified during registration or changing of the antivirus software, and perform the operation again.

When connecting to the quarantine network or the operation network

The L-Server name described in the XML files for changing the network must be identical to the L-Server name contained in the name of the XML file for changing the network. Change either of the virtual L-Server names so they are identical.

  • When connecting to the quarantine network

    Execute the rcxadm avmgr quarantine command.

  • When connecting to the operation network

    Execute the rcxadm avmgr unquarantine command.

67355

FJSVrcx:ERROR:67355:connection error. target=target

Description

The program of target may not have been started.

Corrective Action

After checking if the destination server for communication has been started by referring to the following manuals, resolve the problem, and then perform the operation again.

  • Check the communication destination
    [Virtual Edition]

    Refer to "Chapter 2 Starting and Stopping Managers and Agents" in the "Operation Guide VE", and start the destination server for communication.

    [Cloud Edition]

    Refer to "Chapter 2 Starting and Stopping Managers and Agents" in the "Operation Guide CE", and start the destination server for communication.

    • When target is 127.0.0.1

      The services of Resource Coordinator Manager on the admin server may not have been started. Start the services.

  • Check the port numbers

    Check the port numbers of the admin server and managed servers.

    If there are any mistakes, change the port number to the right one.

    [Virtual Edition]

    For how to change port numbers, refer to "Appendix A Port List" in the "Design Guide VE".

    For how to change port numbers, refer to "8.2 Changing Port Numbers" or "9.1.6 Changing Port Numbers" in the "User's Guide VE".

    [Cloud Edition]

    For how to check port numbers, refer to "Appendix A Port List" in the "Design Guide CE".

    For how to change port numbers, refer to "6.2 Changing Port Numbers" or "7.1.6 Changing Port Numbers" in the "User's Guide for Infrastructure Administrators (Resource Management) CE".

67392

FJSVrcx:ERROR:67392:modifying VM guest failed. detail=detail

Description

Modification of a VM guest failed.

Take corrective action for the content displayed for detail.

If this message is displayed during modification of an L-Server, some of the information of that L-Server may have been successfully modified. To confirm whether information has been modified, wait for a while and then check the information of the relevant L-Server.

Corrective Action
When the format "(message,vmerrno=error_number,ip=IP_address)", or the format "(message,vmerrno=error_number,ip=IP_address,host=VM_host_IP_address)" is displayed
For error_number "400"

Processing of a VM host remote command failed. Check the operating status and network settings of the VM host.

If nothing happens even if the modification operation is performed on the VM host, there is a problem with the VM host. Resolve the problem with the VM host, and then perform the operation again.

[Citrix Xen]

"xe vm-param-set::Error code: MEMORY_CONSTRAINT_VIOLATION" is displayed for detail

You may be using XenServer with a free license.

Resource Orchestrator does not support the use of XenServer with a free license.

Check the license of XenServer registered in the pool of CitrixXen, and apply a commercial license.

If performing the above corrective action does not resolve the problem, or if content different from any of the above is displayed in detail, collect the relevant message and troubleshooting data, and contact Fujitsu technical staff.

67999

FJSVrcx:ERROR:67999:internal error, details

Description

In the following case, an error has occurred.

Corrective Action
When details is antivirus software resources

Collect the relevant message and troubleshooting data, and contact Fujitsu technical staff.

Information

System Log Messages

The messages that are output to the system log on the admin server are as follows:

  • Messages with the "application log" event type
  • Messages with source names starting with "JSE_SWRC_FJSVRCX"