FPolicy EAGAIN errors seen in ONTAP

Applies to

• ONTAP 9
• FPolicy

ActiveIQ Information

• Check Active IQ if this impacts your systems
• Please note, there are 2 Active IQ alerts that utilize this KB to provide further information
  • Signature 1:
    • Excessive EAGAIN errors are present in the FPolicy logs
      • An EMS message has been seen latest AutoSupport that recommends increasing the -send-buffer-size
      • If the value is already at 1048576, open a case with the FPolicy vendor.
  • Signature 2:
    • Fpolicy External Engine Send Buffer Size Best Practice 1mb
      • If the -send-buffer-size is less than 1 MB (1048576 bytes), then a recommendation will be made to increase to 1 MB.

Issue

• EMS or event log show report errors pertaining to EAGAIN errors similar to the following:

Cluster::> event log show -event *fpolicy*

[filer1: fpolicy: fpolicy.eagain.on.write:notice]: Write returned EAGAIN while sending notification to the FPolicy server "12.34.56.78" for vserver ID 3.

• For ONTAP 9.5 and below (works with all versions of ONTAP)

Cluster::> set advanced

Cluster::*> node run * rdfile /etc/log/mlog/fpolicy.log
[kern_fpolicy:error:1552] Write returned EAGAIN[35] [0x0x80c408d00] src/fsm/fsm_external_engine.cc:864
[kern_fpolicy:error:4321] Read returned EAGAIN[35] [0x0x809005a40] fpolicy/fsm/fsm_external_engine.cc:732