Troubleshooting issues related to events
This topic lists how to troubleshoot issues related to events in the Presentation Server.
Event mismatch between the Presentation Server and Infrastructure Management
Events from Infrastructure Management are inserted in Elasticsearch. If there is a mismatch of events, check for the following message in the TsimAudit.log file: Failed to insert events in to system due to
Solution 1:
Sync events between Infrastructure Management and the Presentation Server:
On the Presentation Server, run the following command from the <Presentation Server installation directory>\truesightpserver\bin folder to obtain the component name:
Run the following command to synchronize events with Infrastructure Management. Use the component name that you obtained.
Solution 2:
Check the Elasticsearch health in the IndexserverHealth.log file. Look for entries in the following format:
INFO [Timer-4] INDEXSERVER_HEALTH_STATUS_LOGGER Index server status -> YELLOW
The following table lists the various status:
Deployment type | Presentation Server status | Log entry | Status |
|---|---|---|---|
Standalone | Running | Yellow | Elasticsearch running as expected. |
High-availability | Both nodes are running | Green | Elasticsearch replication happening between both nodes. |
High-availability | Only one node is running | Yellow | Elasticsearch replication not happening between both nodes. |
High-availability | One or both nodes are running | Red | Elasticsearch replication issue. |