Bug ID 650349: Creation or reconfiguration of iApps fails if high speed logging is configured

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.2, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0, 12.1.3

Opened: Mar 10, 2017

Severity: 3-Major

Related Article: K50168519

Symptoms

If logging destination of any type is configured (ArcSight, IPFIX, remote high speed logging, etc.), creation or reconfiguration of iApps will fail. The following error will be reported in /var/log/webui.log and displayed in the GUI: The connection to mcpd has been lost, try again. If the iApp is being create or modified via iControl then the following message will be logged in /var/log/audit -- notice icrd_child[19904]: 01420002:5: AUDIT - pid=19904 user=admin folder=/Common module=(tmos)# status=[The connection to mcpd has been lost, try again.] cmd_data=create sys application service /Common/group2-analytics { template /Common/group2-analytics variables add { statistics__pushinterval { value 120 } statistics__customcollection { value Yes } } lists add { statistics__customcollectionconfig { value { tmm_stat interface_stat cpu_info_stat disk_info_stat host_info_stat profile_dns_stat gtm_wideip_stat dns_cache_resolver_stat tmmdns_zone_stat rule_stat virtual_server_stat pool_member_stat } } } } The import part of the message is the daemon, which is 'icrd_child', and the status, which is 'The connection to mcpd has been lost, try again.'

Impact

iApp creation or reconfiguration fails. Cannot create new iApps or reconfigure existing ones.

Conditions

-- Logging is configured: filter, destination, and publisher where scriptd logs to a high speed logging target, which can occur if the there is a logging filter that has source of 'all' or 'scriptd'. -- Attempting to create or reconfigure iApps.

Workaround

This workaround stops scriptd from logging anything to any logging destination, so you should remove it and restart scriptd after the iApp is created/reconfigured. 1. Which step one you take depends on whether you have log filters that have a source of 'scriptd' and a publisher whose destination is of type remote-high-speed-log: a. If you do, make sure all those filters have their publisher set to 'none'. b. If you do not, create a log-config filter with a source of 'scriptd', a level of 'debug', and a publisher of 'none'. For example: sys log-config filter NoScriptd { app-service none description none level debug message-id none publisher none source scriptd } 2. After the log-config filters are modified, restart scriptd using the following command: bigstart restart scriptd

Fix Information

Can now create or reconfigure iApps if logging is configured.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips