Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[STRM/JSA] Linux DSM events display stored systemd message

0

0

Article ID: KB34781 KB Last Updated: 27 Jul 2019Version: 1.0
Summary:

Stored messages may be found related to Linux events with a raw payload similar to the following:

systemd: Created slice user-0.slice

Symptoms:

The following example events are seen:

<30>Jun 30 18:20:01 hostname systemd: Created slice user-0.slice.
<30>Jun 30 18:20:01 hostname systemd: Started Session 8192 of user root.
<30>Jun 30 18:20:01 hostname systemd: Removed slice user-0.slice.
<30>Jun 30 18:20:01 hostname systemd: Starting user-0.slice.
<30>Jun 30 18:20:01 hostname systemd: Stopping user-0.slice.
<30>Jun 30 18:20:01 hostname systemd: Starting Session 8192 of user root.
<78>Jun 30 18:20:01 hostname CROND[8695]: (root) CMD (/usr/lib64/sa/sa1 1 1)

Solution:

These are low priority info level messages that are generated on a systemd type Log Source such as RHEL 7 or Centos 7. There is no useful information that is associated with these events and JSA is not trying to parse them. These low-level messages are triggered in the /var/log/messages folder on your log source.

To stop these events from triggering and being sent to JSA, you may be required to tune your Linux server by updating the systemd configuration.  Please see the vendor documentation for more information.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search