Service Interruption and Telemetry Issues on Cortex Installation (RHEL 9.4)

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Service Interruption and Telemetry Issues on Cortex Installation (RHEL 9.4)

L0 Member

I'm facing issues with my Cortex install on a RHEL 9.4 system.
Agent version 8.4.0.123787

Kernel version 5.14.0-427.35.1.el9_4.x86_64



Some services are stopped and not restarting:

  • Command Run:
     
    sudo /opt/traps/bin/cytool runtime query
  • Stopped Services: clad, spmd, lted
  • Attempt to Restart Services:
     
    sudo /opt/traps/bin/cytool runtime start all
  • Result: No change; services remain stopped.

No telemetry is being sent to the portal either. any thoughts on this ?


root@rc-tmp-rhel9 ~]# sudo /opt/traps/bin/cytool runtime query
Name PID User Status Command
pmd 930 root Running /opt/traps/bin/pmd
clad N/A N/A STOPPED N/A
dypd 2501 root Running /opt/traps/bin/dypdng
spmd N/A N/A STOPPED N/A
lted N/A N/A STOPPED N/A
pyxd 1214 root Running /opt/traps/python/payload/pyxd
[root@rc-tmp-rhel9 ~]# sudo /opt/traps/bin/cytool runtime start all
Redirecting to /bin/systemctl start traps_pmd.service
Name PID User Status Command
pmd 930 root Running /opt/traps/bin/pmd
clad N/A N/A STOPPED N/A
dypd 2501 root Running /opt/traps/bin/dypdng
spmd N/A N/A STOPPED N/A
lted N/A N/A STOPPED N/A
pyxd 1214 root Running /opt/traps/python/payload/pyxd
[root@rc-tmp-rhel9 ~]# sudo /opt/traps/bin/cytool runtime query
Name PID User Status Command
pmd 930 root Running /opt/traps/bin/pmd
clad N/A N/A STOPPED N/A
dypd 2501 root Running /opt/traps/bin/dypdng
spmd N/A N/A STOPPED N/A
lted N/A N/A STOPPED N/A
pyxd 1214 root Running /opt/traps/python/payload/pyxd

3 REPLIES 3

L4 Transporter

Hi @K.Kerouani, thanks for reaching us using the Live Community.

 

Please check what Content Version is applied on this endpoint. As our Kernel Compatibility doc stands, that RHEL 9.4 kernel version is supported only with the latest release of content updates. The page was updated today, looks like that content has released today.

 

I recommend you to open a Support Case, they can help you to recover this endpoint.

 

If this post answers your question, please mark it as the solution.

JM

from what I can see on that page, the content version for that kernel is 1510-89413 which is what's installed on that endpoint 

5.14.0-427.35.1.el9_4.x86_64

7.9

1510-89413

Then please open a TAC support case, they will help you by analyzing the endpoint logs.

JM
  • 309 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!