ALM-24012 Flume Certificate File Has Expired

Updated on 2024-11-29 GMT+08:00

View PDF

Alarm Description

Flume checks whether its certificate file in the system has expired every hour. This alarm is generated when the server certificate has expired. This alarm is automatically cleared when the certificate file becomes valid again.

Alarm Attributes

Alarm ID	Alarm Severity	Alarm Type	Service Type	Auto Cleared
24012	Major	Error handling	Flume	Yes

Alarm Parameters

Type	Parameter	Description
Location Information	Source	Specifies the cluster for which the alarm is generated.
	ServiceName	Specifies the service for which the alarm is generated.
	RoleName	Specifies the role for which the alarm is generated.
	HostName	Specifies the host for which the alarm is generated.

Impact on the System

The Flume client cannot access the Flume server.

Possible Causes

The Flume certificate file has expired.

Handling Procedure

View alarm information.

Log in to FusionInsight Manager and choose O&M. In the navigation pane on the left, choose Alarm > Alarms. On the page that is displayed, locate the row containing ALM-24012 Flume Certificate Has Expired, and view the Location information. View the IP address of the instance for which the alarm is generated.

Check whether the certificate file in the system is valid. If it is not, generate a new one.

Log in to the node for which the alarm is generated as user root and run the su - omm command to switch to user omm.
Run the following command to go to the Flume service certificate directory:

cd ${BIGDATA_HOME}/FusionInsight_Porter_*/install/FusionInsight-Flume-*/flume/conf
Run the following command to check the effective time and expiration time of the HA user certificate to determine whether the certificate file is still in the validity period:
openssl x509 -noout -text -in flume_sChat.crt
- If yes, go to 9.
- If no, go to 5.
Run the following command to go to the Flume script directory:

cd ${BIGDATA_HOME}/FusionInsight_Porter_*/install/FusionInsight-Flume-*/flume/bin
Run the following command to generate a new certificate file. Then check whether the alarm is automatically cleared one hour later.
sh geneJKS.sh -f Custom certificate password of the Flume role on the server -g Custom certificate password of the Flume role on the client
- If yes, go to 8.
- If no, go to 7.
  NOTE:
  The custom certificate passwords must meet the following complexity requirements:
  
  Contain at least four types of uppercase letters, lowercase letters, digits, and special characters.
  
  Contain 8 to 64 characters.
  
  Be changed periodically (for example, every three months), and certificates and trust lists are generated again to ensure security.
Log in to the Flume node for which the alarm is generated as user omm and repeat 5 to 6. Then, check whether the alarm is automatically cleared one hour later.
- If yes, go to 8.
- If no, go to 9.
Check whether this alarm is generated again during periodic system check.
- If yes, go to 9.
- If no, no further action is required.

Collect the fault information.

On FusionInsight Manager, choose O&M. In the navigation pane on the left, choose Log > Download.
Expand the Service drop-down list, and select Flume for the target cluster.
Click the edit icon in the upper right corner, and set Start Date and End Date for log collection to 10 minutes ahead of and after the alarm generation time, respectively. Then, click Download.
Contact O&M engineers and provide the collected logs.

Alarm Clearance

This alarm is automatically cleared after the fault is rectified.

Related Information

None.

Parent topic: Alarm Reference

Previous topic: ALM-24011 Flume Certificate File Is About to Expire

Next topic: ALM-24013 Flume MonitorServer Certificate File Is Invalid or Damaged

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot