broker failed to aggregate concentrator

[Anonymous]

Hi all,,, I'm facing an issue with broker aggregation.

Broker failed to aggregate with concentrator. 

error logs:

Mar 18 14:55:34 NWAPPLIANCE30922 nw[2251]: [Broker] [info] Aggregation indexes have been saved

Mar 18 15:00:37 NWAPPLIANCE30922 nw[2251]: [Broker] [failure] Aggregation detected range overlap, vSessionStart = 1, lSessionStart = 18613

Mar 18 15:00:37 NWAPPLIANCE30922 nw[2251]: [Broker] [info] Device '127.0.0.1.50005' mapping file saved with 2,316 virtual ranges session [1-18,612] and meta [1-142,970] and local ranges session [1-18,612] and meta [1-142,970]

Mar 18 15:05:37 NWAPPLIANCE30922 nw[2251]: [Broker] [info] Local database found last session for device '127.0.0.1:50005' at session 18,612

Mar 18 15:05:38 NWAPPLIANCE30922 nw[2251]: [Broker] [failure] Aggregation detected range overlap, vSessionStart = 1, lSessionStart = 18613

Mar 18 15:05:38 NWAPPLIANCE30922 nw[2251]: [Broker] [info] Device '127.0.0.1.50005' mapping file saved with 2,316 virtual ranges session [1-18,612] and meta [1-142,970] and local ranges session [1-18,612] and meta [1-142,970]

my SA setup is a VM setup.

Here is the info:

[root@NWAPPLIANCE35423 ~]# initctl list | grep nw

nwdecoder start/running, process 2255

nwlogcollector start/running, process 1771

nwlogdecoder start/running, process 2264

nwconcentrator start/running, process 2270

nwarchiver start/running, process 2271

nwappliance start/running, process 2272

nwbroker start/running, process 2275

[root@NWAPPLIANCE30922 ~]#

any clue on reset mapping or delete the overlapped range?

thanks.

[huanzhou1 · Accepted solution]

u can always reset the data of broker and broker will re-aggregate very fast.

the root cause, i'm not sure, need to find out.

[Anonymous]

its working .  Thank you so much.