[Request to Archive] RSA Security Analytics Log Collector shows that a file is busy in the file collection method
Issue
RSA Security Analytics Log Collector shows that a file is busy in the file collection method.
Cause
When a file from the upload directory is to be processed, it is moved to the work directory.
This move only happens if the file is complete.
If the file transfer process (SFTP for example) is still appending to the file, it will still have a handle open, and hence the file will not be moved until that handle is released. This can cause a loop in which there is a check every 100 milliseconds; after 100 seconds, and every 100 seconds after that, a message is emitted that says we are still busy waiting for the file to be released by the transfer process.
Resolution
This message does not indicates a fatal condition, but instead means that the files are very large or the pipe between the source machine and the Log Collector is slow.
Internal Comments
UserName:shurtj8/12/2014 2:34:42 PM - Updated Article
Updated article and made changes to abide by Primus best practices.
Mirna Amir 13 May 2024
Issue no longer exists
Product Details
RSA Security AnalyticsRSA Security Analytics 10.3
RSA Security Analytics Log Collector
INTERNAL ONLY !!!!
Approval Reviewer Queue
Technical approval queue