[INUG-Users] EIF probe not processing events after server reboot - caused by corrupt cache file belonging to EIF probe

[michael bochner]

We have IBM Tivoli Monitoring (ITM) agents connected to a TEMS which sends
the alerts to a netcool object server via a EIF probe. It normally works
fine but since a server reboot over the weekend no new ITM events were
processed.

The EIF probe was running and start-up looked normal in the log file.

We did a lot of investigation of the Tivoli (TEMS) side but some guesswork
revealed the cause to be corrupted cache files belonging to the EIF probe.

The solution was to stop the EIF probe, delete the cache files then start
the probe again.

The files were in C:\Micromuse\netcool\omnibus\var



They were:

   tivoli_eif.cache

   tivoli_eif.OBJECTSERVER.alerts.status

   tivoli_eif.store.OBJECTSERVER

   tivoli_eif.store.OBJECTSERVER_1

My question is: has anyone else seen this problem with the EIF probe or any
other probes ?

I'm interested if this is a common issue with all probes or just specific to
the EIF probe.

 We had a severity-1 PMR open with IBM for 3 days and they never mentioned
it as a possible solution.

regards,
  michael