Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

Tunnel failed messages in STRM System notifications

0

0

Article ID: KB15392 KB Last Updated: 15 Dec 2009Version: 1.0
Summary:
In STRM Multi host deployment, many tunnels are created between Console and Collector.  These tunnels are timing out.
Symptoms:
The following errors in the STRM dashboard are generated in /var/log/qradar.log. The tunnel between Console and Collector is reset every 30 seconds

STRM Dashboard shows:
[hostcontext.hostcontext] [ProcessMonitor] com.q1labs.hostcontext.processmonitor.ProcessManager: [ERROR] [NOT:0150114103][10.49.31.25/- -] [-/- -]Process tunnel.tunnel17 has failed to start for 5199 intervals. Continuing to try to start...
Solution:
The tunnel could fail to connect in the first attempt due to:
  • High network activity between Console and Collector
  • Firewall between Console and Collector resets the tunnel due to inactivity

These errors are benign.  If the Tunnel is connecting again, these can be safely ignored. 

Note: Tunnel configuration can be found in /opt/qradar/conf/conf.tunnel.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search