XMA: How to uninstall SLSENDER.
As the SLSENDER is configured and added to the XMA pathway when the customer follows the installation process in the XMA manual.
The following procedure can be used to manually stop the SLSENDER , remove any records that have been generated, and stop further records from being placed in the SYSLOGQ table.
Stop the SLSENDER administrative Server.
TACL> xma_manager
Selection 2: Movers
Selection 21: Maintain Administrative Servers
Selection 3: Stop SLSENDER
Delete serverclass from PATHWAY:
TACL> PATHCOM $XMA; DELETE SERVER SLSENDER; EXIT
Delete configuration data from PARAMS table. Run the following in SQLCI from data subvolume:
TACL> SQLCI;DELETE FROM PARAMS WHERE SERVERCLASSTYPE = "SYSLOG_SENDER";
Delete records from SYSLOGQ table.
TACL> SQLCI;DELETE FROM SYSLOGQ;
Check the FILTERS file for active filters with ALERTTYPE SYSLOGQ. Inactivate, delete, or modify those filter to prevent the movers from generating SYSLOGQ messages.
If this article did not provide a solution, please open a case with our support team by sending an email message to
support@xypro.com.
Related Articles
XMA: Procedure to stop XYGATE Merged Audit when changing system time
The correct procedure is to stop all pathway serverclasses, including XMA movers and admin servers (HKEEPER, SLSENDER, etc.) using XMA_MANAGER. >run xma install >xma_manager XYGATEMA Management Main Menu v2.60 * * * * * * * * * * * * * * * * * * * 1: ...
XMA: SLSENDER - Steps to follow for SLSENDER When Upgrading to XMA 2.65
The upgrade to XMA 2.65 makes changes to the SYSLOGQ table. Consequentially, this could cause fatal errors for SLSENDER when it it initially started following the upgrade. This is due to outstanding TMF transactions that remains until they are ...
XMA: TMF is keeping active transactions open for SLSENDER after SLSENDER and XMA Pathway are stopped
The reason for this behavior because is the XMA TACL routines are shutting down the pathway with the Pathmon command ?SHUTDOWN2, MODE IM, UNTIL DONE?. The ?MODE IM? means that it stops the servers immediately but does not close them. This allows them ...
XMA: How to optimize SLSENDER to handle multiple SIEMs
SLSENDER must be optimized for the number of SIEMS and transactions 1. SLSENDER can be configured in XMA_MANAGER. >run xma install >XMA_MANAGER >2: Movers >18: Configure SysLog Send server) 2. In the SysLog Send server menu (SLSENDER), the Max Number ...
XMA: SLSENDER is busy
Use the XMA_SQLCOMPALL macro to generate a new optimized query plan, which will then be used when compiling the objects. TACL> VOLUME $SYSTEM.XYGATEMA TACL> RUN XMA INSTALL TACL> XMA_PWSTOP TACL> XMA_SQLCOMPALL TACL> XMA_PWCOOL The XMA_SQLCOMPALL ...