Workload Security data collector fails with External fpolicy server terminated
Applies to
- Data Infrastructure Insights (DII) (formerly Cloud Insights) Storage Workload Security
- ONTAP 9.8 or higher, Storage Virtual Machines added (SVM)
Issue
- Workload Security Data Collector reports error on Data Infrastructure Insights UI:
Connector is in error state. Service.name: audit. Reason for failure: External fpolicy server terminated.
- Other collectors in the same agent might work
- ONTAP fpolicy server status shows:
No local lif present to connect to FPolicy server.- Agent logs show:
2022-08-04T10:03:48,232 [WARN] [prod] [036d8e5e-c8ac-4de7-9c1a-e2d3dcd5d9f5] [46c02e26-80db-4289-9e5d-6c0f2dcbd426] [agent-AgentDataSourceStateManagerActor] - State response of collector [3d6509b0-ebe7-4dd2-8a23-16c266738b2c] is: {"error":{"code":"InternalError","details":[{"code":"InternalError","message":"External fpolicy server terminated.","target":"audit"}],"message":"Connector is in error state. Service name: audit. Reason for failure: External fpolicy server terminated.","target":"ONTAP Datasource Connector: 10.10.10.10"},"id":"3d6509b0-ebe7-4dd2-8a23-16c266738b2c","name":"10.10.10.10","services":[{"name":"inventoryLdapUserDirectory","status":"running"},{"name":"audit","status":"failed"},{"name":"inventoryCifsShare","status":"running"},{"name":"inventoryVolume","status":"running"},{"name":"inventoryExport","status":"running"},{"name":"usersUnixLocalUserDirectory","status":"running"},{"name":"metadata","status":"notEnabled"},{"name":"inventorySvm","status":"running"},{"name":"usersCifsLocalUserDirectory","status":"running"}],"state":"error"}