Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Syslog Event Correlator(SEC) Error

Status
Not open for further replies.

zhenning

Technical User
Sep 22, 2005
50
CA
We use SEC to generate network alerts and it just stopped working. I can see following logs in sec.log:

Wed Oct 8 10:26:28 2008: Creating event 'dist-jnhn line protocol on GigabitEthernet10/16 down at Oct 8 10:26:12'
Wed Oct 8 10:26:28 2008: Executing shell command '/usr/bin/perl -w /home/nsalert/sec/scripts/line_Email.pl down Oct 8 10:26:12 dist-jnhn GigabitEthernet10/16'
Wed Oct 8 10:26:28 2008: Child 3954 created for command '/usr/bin/perl -w /home/nsalert/sec/scripts/line_Email.pl down Oct 8 10:26:12 dist-jnhn GigabitEthernet10/16'
Wed Oct 8 10:26:29 2008: Child 3954 terminated with non-zero exitcode 13 ( /usr/bin/perl -w /home/nsalert/sec/scripts/line_Email.pl down Oct 8 10:26:12 dist-jnhn GigabitEthernet10/16 )

It seems the problem is "Child 3954 terminated with non-zero exitcode 13". I don't know what that means and how to fix it. I tried to manually execute commnad "/usr/bin/perl -w /home/nsalert/sec/scripts/line_Email.pl down Oct 8 10:26:12 dist-jnhn GigabitEthernet10/16" and it works without errors(I can get alerts).

Any ideas about this error?

Thanks!
Zhenning
 
Please ignore this post. I fixed it. It was the file permission issue that the perl script cannot open the file.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top