000026859 - How to extract logs from an RSA Security Analytics SAW node

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000026859
Applies ToRSA Security Analytics
RSA Security Analytics Warehouse
Script: mapr-support-dump.sh
IssueHow to extract logs from an RSA Security Analytics SAW node.
How do I use the mapr-support-dump.sh script to collect logs from a Security Analytics Warehouse node?
ResolutionThis script collects node and cluster-level information about the node where the script is invoked. The information collected is used to help support diagnose problems. Use mapr-support-collect.sh to collect diagnostic information from all nodes in the cluster.

/opt/mapr/support/tools/mapr-support-dump.sh
    [ -n|--name <name> ]
    [ -d|--output-dir <path> ]
    [ -l|--no-logs ]
    [ -s|--no-statistics ]
    [ -c|--no-conf ]
    [ -i|--no-sysinfo ]
    [ -o|--exclude-cluster ]
    [ -m|--mini-dump <size> ] 


The "mini-dump" option limits the size of the support output. When the -m or --mini-dump option is specified along with a size, mapr-support-dump.sh collects only a head and tail, each limited to the specified size, from any log file that is larger than twice the specified size.


The total size of the output is therefore limited to approximately 2 * size * number of logs. The size can be specified in bytes, or using the following suffixes:
b - bytes
k - kilobytes (1024 bytes)
m - megabytes (1024 kilobytes)


    [ -O|--online ]
    [ -z|--only-cluster
    [ -L|--no-libraries ]
    [ -A|--logs-age <days> ]
    [ --no-hadoop-logs ]
    [ --no-hbase-logs ]
    [ --collect-cores ]
    [ --move-cores ]
    [ --port <port> ]
    [--nfs-port <port> ]
    [ -?|--help ]


 


PARAMETER DESCRIPTION


-n or --name
Specifies the name of the output file. If not specified, the default is a date-named file in the format YYYY-MM-DD-hh-mm-ss.tar


-d or --output-dir
The absolute path to the output directory. If not specified, the default is /opt/mapr/support/collect/


-l or --no-logs
If specified, the command output does not include log files


-s or --no-statistics
If specified, the command output does not include statistics


-c or --no-conf
If specified, the command output does not include configurations


-i or --no-sysinfo
If specified, the command output does not include system information


-o or --exclude-cluster
If specified, the command output does not collect cluster diagnostics


-m, --mini-dump <size>
For any log file greater than 2 * <size>, collects only a head and tail each of the specified size. The <size> may have a suffix specifying units:
b - blocks (512 bytes)
k - kilobytes (1024 bytes)
m - megabytes (1024 kilobytes)


-O or --online
Specifies a space-separated list of nodes from which to gather support output, and uses the warden instead of ssh for transmitting the support data.


-z or --only-cluster
Collects diagnostic information at the cluster level only.


-L or --no-libraries
Excludes libraries.


-A or --logs-age <days>
Collects logs newer than the specified number of days. The default value for this parameter is 7. Specify a value of 0 to have the mapr-support-dump.sh script collect logs of any age.


--no-hadoop-logs
Excludes Hadoop log files.


--no-hbase-logs
Excludes HBase log files.


--collect-cores
If specified, the command collects cores of running mfs processes from all nodes (off by default)


--move-cores
If specified, the command moves mfs and nfs cores from /opt/cores from all nodes (off by default)


--port
The port number used by the FileServer. The default value for this parameter is 5660.


--nfs-port
Specifies the port used by the NFS server. The default value for this parameter is 9998,


-? or --help
Displays usage help text


 


EXAMPLES
Collect support information and dump it to the file /opt/mapr/support/collect/mysupport-output.tar:


/opt/mapr/support/tools/mapr-support-dump.sh -n mysupport-output

Legacy Article IDa66644

Attachments

    Outcomes