System audit messages

Contributors netapp-perveilerk

You should be familiar with audit messages belonging to the system audit category. These are events related to the auditing system itself, grid node states, system-wide task activity (grid tasks), and service backup operations, so that you can address potential issues.

Code Message title and description See

ECMC

Missing Erasure Coded Data Fragment: Indicates that a missing erasure coded data fragment has been detected.

ECOC

Corrupt Erasure Coded Data Fragment: Indicates that a corrupt erasure coded data fragment has been detected.

ETAF

Security Authentication Failed: A connection attempt using Transport Layer Security (TLS) failed.

GNRG

GNDS Registration: A service updated or registered information about itself in the StorageGRID system.

GNUR

GNDS Unregistration: A service has unregistered itself from the StorageGRID system.

GTED

Grid Task Ended: The CMN service finished processing the grid task.

GTST

Grid Task Started: The CMN service started to process the grid task.

GTSU

Grid Task Submitted: A grid task was submitted to the CMN service.

IDEL

ILM Initiated Delete: This audit message is generated when ILM starts the process of deleting an object.

LKCU

Overwritten Object Cleanup. This audit message is generated when an overwritten object is automatically removed to free up storage space.

LLST

Location Lost: This audit message is generated when a location is lost.

OLST

Object Lost: A requested object cannot be located within the StorageGRID system.

ORLM

Object Rules Met: Object data is stored as specified by the ILM rules.

SADD

Security Audit Disable: Audit message logging was turned off.

SADE

Security Audit Enable: Audit message logging has been restored.

SVRF

Object Store Verify Fail: A content block failed verification checks.

SVRU

Object Store Verify Unknown: Unexpected object data detected in the object store.

SYSD

Node Stop: A shutdown was requested.

SYST

Node Stopping: A service initiated a graceful stop.

SYSU

Node Start: A service started; the nature of the previous shutdown is indicated in the message.

VLST

User Initiated Volume Lost: The /proc/CMSI/Volume_Lost command was run.

Related information

LKCU: Overwritten Object Cleanup