Unix monitored host shows the message "The privilege command /usr/sbin/ is executed by user with id x" (4304964)

Tchater maintenant avec le support

Retour

Commentaire envoyé

Cet article vous a-t-il à résoudre un problème ?

Sélectionner une évaluation

Titre

Unix monitored host shows the message "The privilege command /usr/sbin/ is executed by user with id x"
Description

The following messages can be seeing from Linux monitored host; commands executed by the user configured for data collection within Foglight:
Sep 14 13:37:36 Server x kern:notice unix: The privilege command /usr/sbin/netstat, is executed by user with id x
Sep 14 13:37:39 Server x kern:notice unix: The privilege command /usr/sbin/lspv, is executed by user with id x
Sep 14 13:37:39 Server x kern:notice unix: The privilege command /usr/sbin/lsvg, is executed by user with id x
Cause

The product is working as designed.
Résolution

The syslog entries are in "notice" level. They do not indicate any warning or error and were logged simply because the agent runs those commands to collect system information. Some commands will be executed multiple times in one collection cycle. For example, agent will run netstat for each network interface in the monitored host. It is expected to see some similar entries are logged in seconds.

If those log entries are really a big issue, you might follow the solutions in the below link, or ask IBM for help.
RBAC privileged commands with ALLOW_ALL logged to syslog

Commentaire envoyé

Cet article vous a-t-il à résoudre un problème ?

Sélectionner une évaluation

Contenu recommandé

Produit(s) :: Foglight
6.1.0, 6.0.0, 5.9.8, 5.9.7, 5.9.5, 5.9.4, 5.9.3, 5.9.2, 5.7.5, 5.7.1; Foglight for Databases
6.0.0, 5.9.7, 5.9.5, 5.9.4, 5.9.3, 5.9.2; Foglight for Virtualization Enterprise Edition
8.7, 8.6, 8.5.5, 8.5, 8.4, 8.3

Historique de l’article :: Créé le : 11/8/2017
Dernière mise à jour le : 5/7/2023

Titre