Cisco Active Network Abstraction Reference Guide, 3.7.1
System Events

Table Of Contents

System Events


System Events


This section describes the Cisco ANA system events. System events appear in the Cisco ANA EventVision System tab. They include a variety of events pertaining to the system activities, from alarm thresholds to disk space and AVMs. Cisco ANA system events and system event messages are listed in the following tables:

System events—Table 39-1

System event messages—Table 39-2

For definitions of system event terms and acronyms, see Table 39-3. For information about Cisco ANA EventVision, see the Cisco Active Network Abstraction 3.7.1 User Guide.

Table 39-1 Cisco ANA System Events 

Source OID
Message
Severity
Cause
Action
Category: MCReachability

IMC

Agent vne_name, agent_ip is reachable: DNA Unit = unit_ip AVM =avm_id

CLEARED

The VNE is reachable.

None needed.

IMC

Agent vne_name,agent_ip is unreachable: DNA Unit = unit_ip AVM = avm_id

MINOR

Various causes; system or network failure.

Contact Cisco Support.

IAvm

AVM unit_ip: avm_id (avm_key) is reachable

CLEARED

The AVM is reachable.

None needed.

IAvm

AVM unit_ip:avm_id (avm_key) is unreachable

MINOR

Network or machine failure.

Contact Cisco Support.

IMC

Unit unit_ip reachable

CLEARED

The MC is reachable.

None needed.

IMC

Unit unit_ip unreachable

MINOR

System, network, or machine failure.

Contact Cisco Support.

Category: alarm threshold

IAvm

Violet threshold reached, alarms must be deleted

CRITICAL

There are too many alarms open in the system.

Remove alarms.

IAvm

Red threshold reached, deleting alarms!

CRITICAL

There are too many alarms open in the system and the user has not removed them.

The system is deleting some of the alarms.

Category: backup

IAvm

Unable to backup the database because the database is not in archive mode

MAJOR

The database is not configured to work in archive log mode so the database cannot be backed up.

Change the database to archive log mode.

IAvm

Unable to delete directory:path

MAJOR

Permission problems.

Check the directory permissions.

IAvm

Unable to delete file:name

MAJOR

Permission problems.

Check the file permissions.

IAvm

Error deleting files from:path

MAJOR

Permission problems.

Check the permissions of the directory containing the files and the permissions on the files.

IAvm

Error deleting files from:path

MAJOR

Permission problems.

Check the file permissions.

Category: bad alarms

IAvm

Found alarms that do not refer to any network element in the system. Deleting count alarms.

MINOR

Element removed without first removing its alarms.

The system is removing the relevant alarms.

Category: bad oid

IAvm

count bad oids found in table businessObject

CRITICAL

Bad business objects were inserted into the database.

The system is removing them.

Category: bos misconfiguration

IElementManagement

duplicate_value is configured as existing_element in Unit unit_ip AVM avm_id and also as new_element in Unit new_unit_ip AVM new_avm_id

MAJOR

XML files were edited manually and incorrectly.

Note: The existing element is a VNE. The duplicate value is either the VNE's name or its IP address.

Fix XML file. Remove conflicting entry.

Category: drop affected

IAvm

Dropping affected Message of size:size the total affected waiting to be saved is:count

CRITICAL

The system was shut down while removing affected messages.

The system removes the remaining affected messages.

Category: event-rate-limiter

IAvm

Dropped Events Report

Long Description

List of dropped events, with the total number of events dropped for each type of event. For example:

Count  type (ID)
-----------------------------------------
282    dot1qBridge trap (dot1qBridge trap
601     generic trap (generic trap)

CRITICAL

There is an event burst in the network. The number of events received exceeded the Cisco ANA threshold. Cisco ANA dropped the excess events.

Check the network for the root cause of the event burst.

IAvm

number_of_seconds sec limiter for default event type reached CLEARED threshold

CLEARED

The rate of events received has now dropped below the threshold and is normal.

None needed.

IAvm

number_of_seconds sec limiter for default event type reached WARNING threshold

WARNING

The rate at which events are being received is very close to the defined threshold value. There may be an event burst in the network.

Check the network for the root cause of the event burst.

Category: free space

IAvm

No room for tablespace tablespace_name on the disk

CRITICAL

There is no free space on the disk partition that the database occupies.

Free some space on the disk partition.

IAvm

No room for object_name in tablespace tablespace_name

MINOR

There is not enough free table space to accommodate growth in the table space.

The system will increase the table space when the table needs to grow.

Category: license

MCNetwork

No license file exists (Evaluation system).

WARNING

Cisco ANA is installed without a license file; it is an evaluation system. The message occurs whenever the license file is:

Missing.

Invalid signature.

Locked on another MAC or host.

All features are expired.

Contact your Cisco representative to get a license file.

MCNetwork

Exceeding feature usage (Limited license. Either counted or expired).

WARNING

The license for some feature is either expired or usage exceeded.

Contact your Cisco representative to renew or modify the license for this feature.

Category: no stacktrace

IAvm

Session discard a msg due to an exception exception_msg

MAJOR

An exception occurred while handling an internal message.

If this event recurs frequently, check the logs for the exception type.

Category: partitioning

IAvm

Unable to split partition partition_name on table_name because it contains data!

CRITICAL

The system did not split the partition before the system started inserting data into it.

Contact Cisco Support.

Category: queue-size-limiter

IAvm

Queue Size Limiter Report

CRITICAL

There was an event burst in the network. The number of events received exceeded the Cisco ANA threshold. Cisco ANA dropped the excess events.

Check the network for the root cause of the event burst.

Category: session timeout

IAvm

Session creator creator has timed out (session XID=session_xid)

MINOR

The response to the last ping message was longer than the threshold time. This can result from delays and errors in the network or the application.

Notify Cisco Support (low priority).

Category: severity

IAvm

Found Integrity problem on problems elements

CRITICAL

There was a problem calculating the severity.

The system will fix the inaccuracy.

Category: tickets capacity

IAvm

Tickets capacity back to normal.

CLEARED

The number of tickets Cisco ANA is generating has dropped below the defined threshold value.

None needed.

IAvm

Tickets capacity overflow, red threshold reached.

CRITICAL

The number of new tickets Cisco ANA is generating has reached the defined threshold value.

Check the network for the root cause of the event burst.

Category: user disabled

IAvm

Too many failed login, user disabled username

MINOR

Too many failed login attempts caused Cisco ANA to disable the username.

Investigate the reason for the user login failures. If the reason was legitimate, reset the user profile to enabled.

Category: Device System Events

IElement
Management

Agent agent_ip is not loading because of incorrect polling group. BOS Unit = unit_ip AVM = avm_id

MINOR

The polling group defined while adding the agent does not exist or is corrupt.

Verify the polling group definition and specify the correct polling group.

IElement
Management

Configuration Error - Duplicate IP [existing_ip]. Will unload device.

CRITICAL

The error can occur when:

A duplicate agent IP was added by mistake, even if the management IP address on the device is different; or

Two devices have a duplicate management IP address and two agents for these two devices were added.

Remove the agent with the duplicate IP, rectify that on the device, and then add the agent again.

IElement
Management

Configuration Error - Duplicate Key [existing_key]. Will unload device.

CRITICAL

Cisco ANA found a duplicate device key and will unload the device.

Assign a unique key to the device, then reload it.

IElement
Management

Agent agent_ip is starting. BOS Unit = unit_ip AVM = avm_id

MINOR

The specified VNE is starting.

None needed.

IElement
Management

Agent agent_ip is shutting down. BOS Unit = unit_ip AVM = avm_id

MINOR

The specified VNE is shutting down.

None needed.

IElement
Management

Agent agent_ip not responding: BOS Unit = unit_ip AVM = avm_id

MAJOR

The specified VNE is not responding.

Check AVM logs for any errors or memory issues.

IElement
Management

Agent agent_ip suppressed: BOS Unit = unit_ip AVM = avm_id

MAJOR

The specified VNE is not responding. Efforts to restart the VNE have failed, so Cisco ANA is now suppressing the VNE.

Check the VNE and restart manually.

IElement
Management

Out of Memory

CRITICAL

The AVM memory is insufficient.

Increase the amount of memory allocated to the AVM.

Category: AVM System Events

IAvm

AVM avm_id is starting. BOS Unit = unit_ip

MINOR

The specified AVM is starting.

None needed.

IAvm

AVM avm_id is shutting down.BOS Unit = unit_ip

MINOR

The specified AVM is shutting down.

None needed.

IAvm

AVM avm_id suppressed: BOS Unit = unit_ip AVM = avm_id

MINOR

The specified AVM is not responding and Cisco ANA's efforts to restart it have failed multiple times. Cisco ANA is now permanently suppressing the AVM.

Check AVM logs for any evident errors, rectify those errors, and restart manually.

IAvm

AVM avm_id not responding: BOS Unit = unit_ip AVM = avm_id

MAJOR

The specified AVM is not responding.

Check AVM logs for any evident errors, rectify those errors, and restart manually.

IAvm

Memory usage normal

CLEARED

The amount of memory the AVM consumes has returned to normal (occurs only after usage was set to HIGH).

None needed.

IAvm

Memory usage high

WARNING

The amount of memory the AVM consumes exceeded the HIGH threshold (set as a percentage of total memory; default is 85%).

Consider increasing the amount of memory for this AVM.

IAvm

AVM avm_id started. BOS Unit = unit_ip

MINOR

The specified AVM has started.

None needed.

IAvm

AVM avm_id shut down.BOS Unit = unit_ip

MINOR

The specified AVM has shut down.

None needed.

IAvm

An outgoing frame_type frame to port_peer_description was dropped

MAJOR

There is insufficient buffer space for outgoing transport frames.

Note the machine's CPU usage and then contact Cisco Support.

IAvm

repeat_count_frames were dropped in the last time seconds - for example an outgoing frame_type frame to port_peer_description

MAJOR

There is insufficient buffer space. Repeated events were suppressed to avoid an event storm.

Note the machine's CPU usage and then contact Cisco Support.

IAvm

A deserialization error occurred: class version error while deserializing a frame_type_name frame from transport_string to transport_string:class_name

MAJOR

Code incompatibility exists between the source's AVM and the target's AVM.

Contact Cisco Support.

IAvm

deserialization_error_repeat_count deserialization errors occurred in the last time seconds - for example: class version error while deserializing a frame_type_name frame from transport_string to transport_string:class_name

MAJOR

A code incompatibility exists; repeated events were suppressed.

Contact Cisco Support.

Category: Unit System Events

IMC

Server unit_ip manual failover initiated. Raising Redundant machine = redundant_unit_ip

MAJOR

A manual failover was requested for unit unit_ip. Cisco ANA is attempting to start the specified standby machine.

None needed.

IMC

Server unit_ip not responding. Raising Redundant machine = redundant_unit_ip

MAJOR

A manual failover was requested for unit unit_ip. Cisco ANA is attempting to start the specified standby machine.

None needed.

IMC

Server unit_ip manual failover initiated. No Redundant machine available.

MAJOR

The High Availability service cannot service the failover request because it cannot find an assigned standby machine.

Assign a machine to serve as a standby unit.

IMC

Server unit_ip not responding. No Redundant machine available.

MAJOR

The High Availability service cannot service the failover request because the assigned standby machine unit_ip is not responding and there is no machine assigned to replace it.

Assign a machine to serve as a standby unit.

IMC

Registry Possibly out of Sync.

WARNING

The Registry service has detected that the registry is not synchronized with the golden source.

Reload the unit.

IMC

BOS Unit unit_ip is starting.

MINOR

The specified unit is starting.

None needed.

IMC

BOS Unit unit_ip is shutting down.

MINOR

The specified unit is shutting down.

None needed.

IMC

Uplink to peer_host_address/peer_AVM_id disabled

MINOR

The administrator disabled the uplink to the specified host or peer AVM.

None needed.

IMC

Uplink to peer_host_address/peer_AVM_id enabled

MINOR

The administrator disabled the uplink to the specified host or peer AVM.

None needed.

IMC

Uplink to peer_host_address/peer_AVM_id connected

MINOR

The uplink connection with the specified host or peer AVM was established.

None needed.

IMC

Uplink to peer_host_address/peer_AVM_id down

MINOR

The uplink to the specified host or peer AVM was lost.

Look for IP connectivity problems.

Category: CE-Service Discovery

MCVM

Service has been stopped

Long Description

Timeout occurred while retrieving data from the database.

MAJOR

Discovery service was stopped due to multiple timeouts of a database query.

Fix the database timeouts root cause. Manually restart the discovery service.

Category: Topology Discovery

MCVM

Physical Link discovery inconsistent

Long Description

Physical Link discovery of Port ipPort using connectTechnology information conflicts with verification based on disconnectTechnology information. You are strongly recommended to wait until the link disappears and then create a static link from Port ipPort to its neighbor.

MAJOR

A flickering link connected, disconnected, and reconnected due to conflicting topology information.

Disconnect the link, wait until the link disappears, and then create a static link.

Category: Others

IManaged
Element

VNE definitions did not load properly

Long Description

VNE definitions did not load properly. Reason: reason

CRITICAL

Cisco ANA was unable to load VNEs.

Check the AVM logs for any evident errors, rectify those errors, and restart manually.


Table 39-2 Error and Event Messages 

Description
Cause
Action

The key of AVM unit_ip:avmid (avmeap) was changed to newkey

The Administrator changed the AVM key.

None needed.

Full GC max time exceeded (reached seconds seconds)

The system moved some of the heap to the swap.

Increase the amount of physical memory or reduce the amount of memory allocated to the AVM.

AVM not responding, DNA Unit: unit_ip, AVM: avm_id

The High Availability service determined that the AVM avm_id on unit unit_ip is not responding.

None needed.

AVM suppressed, DNA Unit: unit_ip, AVM: avm_id

The High Availability service has suppressed AVM avm_id on unit unit_ip. This means that the AVM will not be started again automatically.

Resolve the problem that caused the suppression, then restart the AVM manually.

Out Of Memory, DNA Unit: unit_ip, AVM: avm_id

The specified AVM exceeded its allocated memory.

Assign more memory to the AVM, then restart the AVM.

A message was dropped from vne_xid's mailbox: message_class from XID to XID

There is insufficient buffer space in the specified VNE's message queue.

Contact Cisco Support.

number messages were dropped in the last number seconds - for example this message from vne_xid's mailbox: message_class from XID to XID

There has been insufficient buffer space in the specified VNE's message queue for the specified time, and repeated events are being suppressed.

Contact Cisco Support.

Dropped events report:
    event type:number
    event type:number

The event type reached its rate limit and events of this type were dropped.

Contact Cisco Support.

period_in_seconds sec period limiter for event_type event type reached WARNING threshold

The event type reached its warning threshold.

Contact Cisco Support.

period_in_seconds sec period limiter for event_type event type reached CLEARED threshold

The event type reached its cleared threshold.

None needed.


Table 39-3 defines some common security event acronyms.

Table 39-3 System Event Terms and Acronyms 

Term
Definition

AVM

A Cisco ANA Java process that provides the necessary distribution support platform for executing and monitoring multiple VNEs.

avm_id

AVM identifier

avm_key

AVM key

BOS

Cisco ANA

DNA

Cisco ANA

MC

Cisco ANA unit

VNE

Virtual Network Element