cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1197
Views
0
Helpful
2
Replies

Changing the log collector in ACS 5.6

mb0000000
Level 1
Level 1

When changing the log collector in an ACS 5.6 distributed deployment, what happens to the existing logs on the old log collector?  I have two ACS, a primary+log collector, and a secondary.  If I change the log collector from primary to secondary I cannot see the historic logs - it seems they do not get trasferred to the new log collector, and the old collector is no longer running the view* processes so I cannot start the report viewer on it.  The "Monitoring Configuration" on the new collector is also in unconfigured state and needs reconfiguring.  Also it does not seem possible to restore my backups of the view database onto the new collector.  How do I manage old logs, backups and related config when changing the log collector?

Thanks,
MB

2 Replies 2

Kanwaljeet Singh
Cisco Employee
Cisco Employee

Hi MB,

Once you change the log-collector you lose the logs as you said. There is no way to restore the logs from existing log collector to new one. However, if you have viewdb full backup taken from the existing log collector, you can try and restore it on the new one. But it will overwrite the existing logs on new one. 

I haven't tried it myself but if you really want those logs on new log collector , even though you have them on the backup on FTP, then you can try this in your lab environment before trying it on production.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Thanks for the response, and sorry it's taken me so long to come back.  I’d like to restore the logs on the new collector because having them stored on the SFTP repository isn’t much use if I have no way to view them.  When I previously looked at restoring a viewdb backup from the old log collector onto the new one I couldn't see any of the backup files listed under 'Monitoring configuration > System Operations > Data Management > Restore'.  Recently I tried again with 5.7 and found that after changing collector the old backups are being listed on the new one.  However after doing a restore the management interface won't start:

na1-mgmt-lon7/acsadmin# show application status acs

ACS role: SECONDARY

Process 'database'                  running
Process 'management'                running (HTTP is nonresponsive)
Process 'runtime'                   running
Process 'adclient'                  running
Process 'ntpd'                      running
Process 'view-database'             running
Process 'view-jobmanager'           running
Process 'view-alertmanager'         running
Process 'view-collector'            running
Process 'view-logprocessor'         running

na1-mgmt-lon7/acsadmin#

I've had to change the log collector back to the primary.  Now when I try to make the secondary log collector again the management goes straight into "HTTP is nonresponsive" and gets stuck there.  This is on 5.7 patch 1.

Thanks,
MB