为了帮助您进行高级故障排除和使用思科 TAC,我们提供L 以下故障排除工具。要使用这些工具,请以任何用户身份登录运行 dynamic attributes connector 的 Ubuntu 主机。
检查容器状态
要检查 dynamic attributes connector Docker 容器的状态,请输入以下命令:
cd ~/csdac/app
sudo ./muster-cli status
输出示例如下:
============================== CORE SERVICES =============================
Name Command State Ports
----------------------------------------------------------------------------------------------------------
muster-bee ./docker-entrypoint.sh run ... Up 50049/tcp, 50050/tcp
muster-etcd etcd Up 2379/tcp, 2380/tcp
muster-ui /docker-entrypoint.sh runs ... Up (healthy) 0.0.0.0:443->8443/tcp,:::443->8443/tcp
muster-ui-backend ./docker-entrypoint.sh run ... Up 50031/tcp
=========================== CONNECTORS AND ADAPTERS ===========================
Name Command State Ports
-------------------------------------------------------------------------------
muster-adapter-fmc.1 ./docker-entrypoint.sh run ... Up 50070/tcp
muster-connector-vcenter.1 ./docker-entrypoint.sh run ... Up 50070/tcp
启用调试日志记录并生成故障排除文件
如果思科 TAC 建议这样做,请启用调试日志记录并生成故障排除文件,如下所示:
cd ~/csdac/app
sudo ./muster-cli debug-on
sudo ./muster-cli ts-gen
故障排除文件名为 ts-bundle-timestamp.tar 并在同一目录中创建。
下表显示了故障排除文件的位置以及故障排除文件中的日志。
位置
|
它包含的内容
|
/csdac/app/ts-bundle-timestamp/info
|
etcd 数据库内容
|
/csdac/app/ts-bundle-timestamp/logs
|
容器日志文件
|
/csdac/app/ts-bundle-timestamp/status.log
|
容器状态、版本和映像状态
|
验证 FMC 上的动态对象
要验证连接器和适配器是否正在 FMC 上创建对象,您可以在 FMC 上以管理员身份使用以下命令:
sudo tail f /var/opt/CSCOpx/MDC/log/operation/usmsharedsvcs.log
示例:成功创建对象
26-Aug-2021 12:41:35.912,[INFO],(DefenseCenterServiceImpl.java:1442)
com.cisco.nm.vms.api.dc.DefenseCenterServiceImpl, ajp-nio-127.0.0.1-9009-exec-10
** REST Request [ CSM ]
** ID : 18b25356-fd6b-4cc4-8d27-bbccb52a6275
** URL: POST /audit
{
"version": "7.1.0",
"requestId": "18b25356-fd6b-4cc4-8d27-bbccb52a6275",
"data": {
"userName": "csdac-centos8",
"subsystem": "API",
"message": "POST https://myfmc.example.com/api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f
/object/dynamicobjects Created (201) - The request has been fulfilled and resulted in a new resource being created",
"sourceIP": "192.168.0.103",
"domainUuid": "e276abec-e0f2-11e3-8169-6d9ed49b625f",
"time": "1629981695431"
},
"deleteList": []
}
示例:对象创建失败(在本例中是因为适配器用户没有足够的权限):
26-Aug-2021 12:47:50.440,[INFO],(DefenseCenterServiceImpl.java:1442)
com.cisco.nm.vms.api.dc.DefenseCenterServiceImpl, ajp-nio-127.0.0.1-9009-exec-2
** REST Request [ CSM ]
** ID : 58566831-7532-4d61-a579-2bbc3c325b2f
** URL: POST /audit
{
"version": "7.1.0",
"requestId": "58566831-7532-4d61-a579-2bbc3c325b2f",
"data": {
"userName": "csdac-centos8",
"subsystem": "API",
"message": "GET https://myfmc.example.com/api/fmc_config/v1/domain/e276abec-e0f2-11e3-8169-6d9ed49b625f/
object/dynamicobjects/vCenter___CentOS_8__4 Forbidden (403) - The server understood the request, but is refusing to fulfill it",
"sourceIP": "192.168.0.103",
"domainUuid": "e276abec-e0f2-11e3-8169-6d9ed49b625f",
"time": "1629982070404"
},
"deleteList": []
}