ONTAP reports an 'Auditing error' due to No buffer space available
Applies to
ONTAP 9.7P10 or later
Issue
ONTAP reports an Auditing error
due to No buffer space available
:
- An SNMP trap is detected:
2024/11/20 22:00:34 .1.3.6.1.4.1.789.0.16 Normal "Status Events" 10.254.11.111 - .1.3.6.1.4.1.789.0.16 enterprises.789.0.16 A user-defined trap meant to provide notification, audit.log.event:Auditing error (Audit messages started to drop. Reason = No buffer space available) occurred at 2024-11-20 22:00:33. 1-80-000011
2024/11/20 22:00:34 .1.3.6.1.4.1.789.0.16 Normal "Status Events" 10.254.11.111 - .1.3.6.1.4.1.789.0.16 enterprises.789.0.16 A user-defined trap meant to provide notification, audit.log.event:Auditing error (Audit messages transmission resumed.) occurred at 2024-11-20 22:00:33. 1-80-000011
Notes:
.1.3.6.1.4.1.789.0.16
indicates the trap is a notification trap (Defined as NOTIFICATION-TYPE innetapp.mib
)10.254.11.111
is the IP address of the issued node's management LIF.- EMS log reports the same:
[?] Wed Nov 20 22:00:33 +0000 [node1: mgwd: audit.log.event:notice]: Auditing error (Audit messages started to drop. Reason = No buffer space available) occurred at 2024-11-20 22:00:33.
[?] Wed Nov 20 22:00:33 +0000 [node1: mgwd: audit.log.event:notice]: Auditing error (Audit messages transmission resumed.) occurred at 2024-11-20 22:00:33.
- Autosupport (ASUP) ->
AUDIT-MLOG-TXT.GZ
log reports the same:
0000001d.180223b6 3e0a922b Wed Nov 20 2024 22:00:33 +00:00 [kern_audit:info:2108] 1 audit messages dropped from 2024-11-20 22:00:33 to 2024-11-20 22:00:33. Last failure reason = No buffer space available