由于Vscan表更新、Vscan断开连接

最后更新
另存为PDF

Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

ONTAP 9
Vscan

问题描述

在 EMS 日志中， Vscan表更新事件(OffboxVScanTableUpd) 会报告如下所示：

Mon Jan 15 00:04:51 +0000 [Node-01: nblade2: Nblade.vscanNoScannerConn:EMERGENCY]: Vserver "svm" has no virus scanner connection. Mon Jan 15 00:04:52 +0000 [Node-01: OffboxVScanTableUpd: ems.engine.suppressed:debug]: Event 'Nblade.scannerDisconnected' suppressed 1 times in last 1222378 seconds. Mon Jan 15 00:04:52 +0000 [Node-01: OffboxVScanTableUpd: Nblade.scannerDisconnected:notice]: Vserver "svm" disconnected from Vscan server (IP: 10.48.xx.xx).

Mon Jan 15 00:05:42 +0000 [Node-01: mgwd: vscan.newVersion.allocated:info]: Vscan version mechanism added new version-ID for Vserver 'svm' corresponding to vendor 'symantec protection engine', version '20240114.7'. Mon Jan 15 00:05:42 +0000 [Node-01: OffboxVScanTableUpd: ems.engine.suppressed:debug]: Event 'Nblade.scannerConnected' suppressed 1 times in last 1222428 seconds. Mon Jan 15 00:05:42 +0000 [Node-01: OffboxVScanTableUpd: Nblade.scannerConnected:notice]: Vserver "svm_gbclh1valecifs1" connected to Vscan server (IP: 10.48.xx.xx).

Audit log 报告相同时间戳的vscan事件、我们可以看到vscan已断开连接并返回新版本、这表示vscan软件更新导致此事件

Node-01 svm 10.48.32.75 1/15/2024 00:04:52 scanner-disconnected remote-closed 10.48.xx.xx 1 Node-01 svm 10.48.32.75 1/15/2024 00:05:42 scanner-connected symantec protection engine 20240114.7 10.48.xx.xx 1