OPERATIONAL DEFECT DATABASE
...
...
RP/0/RP1/CPU0:2022 Nov 30 10:12:19.607 CET: resmon[320]: %HA-HA_WD-3-DISK_ALARM_ALERT : A monitored device /var/log ( log:/ ) is above 80% utilization. Current utilization = 80. Please remove unwanted user files and configuration rollback points. The same error message was continuously logged, almost every second, filling up /var/log on the Router [xr-vm_node0_RP1_CPU0:~]$tail /var/log/rabbitmq/rabbit\@host.log ... =ERROR REPORT==== 30-Nov-2022::09:45:54 === ** Connection attempt from disallowed node rabbitmqctl2980@host ** =ERROR REPORT==== 30-Nov-2022::09:45:56 === ** Connection attempt from disallowed node rabbitmqctl2980@host ** ...
No specific conditions or trigger.
Truncate the log file (truncate -s 0 /var/log/rabbitmq/rabbit@host.log) and then append the following configuration to /etc/logrotate.d/cisco.conf # rabbitmq workaround /var/log/rabbitmq/*.log { size 10M }
rabbitmq-server implements a message broker infrastructure. In IOS-XR, this process is currently used by the telemetry infrastructure to collect telemetry data from other processes. It affects gNMI telemetry related functionality. rabbitmq-server is started automatically when the router boots, and this log file (/var/log/rabbitmq/*.log) gets created at that point. There is no XR configuration to control the spawning of this process. /var/log could eventually become full because of this bug, and then it will impact some processes’ ability to write log files. This can affect some operations like install and also the system debuggability.
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
