Initialization Issue On Netwitness Appliances

[MohdSaadKhan]

I am getting a issue in one of the hybrid appliances and i think database files got corrupted. When I have gone through the /var/log/messages i got below error;

XFS (dm-1): xfs_log_force: error 5 return

XFS (dm-2): xfs_log_force: error 5 return

XFS (dm-0): xfs_log_force: error 5 return

Also i am getting additional mount point at /var/netwitness/concentrator/

[root@XX.XXconcentrator]# ll

ls: cannot access sessiondb0: Input/output error

ls: cannot access metadb0: Input/output error

total 136

drwxr-xr-x. 20 root root  4096 Sep 13 05:58 index

drwxr-xr-x.  2 root root 61440 Sep 18 06:36 metadb

???????????  ? ?    ?        ?            ? metadb0

drwxr-xr-x.  2 root root 24576 Sep 18 06:36 sessiondb

???????????  ? ?    ?        ?            ? sessiondb0

drwxr-xr-x.  2 root root  4096 Sep 18 06:36 statdb

Can anyone suggest workaround to resolve this database issue?

[SravanKoneti1]

Hi Mohd,

Operating System was unable to access the database directories. Try below steps.

1. Stop Decoder capture and Concentrator aggregation

2. Reboot the Hybrid appliance.

Usually, the file system errors can repaired by OS during reboot. If still "xfs_log_force: error 5 return" error persists, try

000017884 - Error message "xfs_log_force: error 5" is reported on an RSA Security Analytics appliance