Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

#4373: Logs/data required to troubleshoot Reporting issues

New Member

Posts: 46

#4373: Logs/data required to troubleshoot Reporting issues

Problem Summary

This will help in collecting logs/data required to troubleshoot reporting issues.

Customer Environment:

Infoblox grid with reporting appliance.

Version:

All NIOS versions

A specific report is delayed or not being generated -

Logs/data to be collected:

Name of the reports that are affected?
Were you able to generate this report without any issues before?
Are any firewalls blocking communications between tcp/1024 through tcp/65535 on forwarder to tcp/9997 on the indexer (Reporting appliance)?
Grid Master support bundle.
Reporting servers support bundle.
Database backup from NIOS as well as from the reporting appliance.
Output of the command 'show date' from CLI of the reporting appliance.
Traffic capture from "All" ports of the reporting member. Run the capture for 5 minutes.

High CPU observed on a physical or vNIOS Member which has Reporting enabled -

Logs/data to be collected:

When did the issue start?
Is the affected member running vNIOS? If yes, please provide below details:
- Screenshot from VMWare vSphere client which shows the hardware details, CPU/Memory usage, version, etc
Grid Master support bundle.
Reporting servers support bundle.
Database backup from NIOS as well as from the reporting appliance.
Output of the following CLI commands from SSH of the reporting appliance.

Infoblox > show connections numerical
Infoblox > show cpu 10 40
Infoblox > show memory
Infoblox > set maintenancemode
Maintenance Mode > show process all
Maintenance Mode > set maintenancemode off

Screenshot of CPU usage in the ‘System Activity Monitor’ widget for the reporting member. You can add this widget in the Dashboard panel >> select Status >> click on the drop down button next to Status and click 'Add Content' >> Drag and drop 'System Activity Monitor' widget to the dashboard screen.
Screenshot of ‘CPU Utilization Trend (Detailed)’ report by Login to GUI >> Reporting >> Reports >> Reports >> select “CPU Utilization Trend (Detailed)” >> in filter select the reporting member.

No reporting data -

Logs/data to be collected:

Are any firewalls blocking communications between tcp/1024 through tcp/65535 on forwarder to tcp/9997 on the indexer (Reporting appliance)?
Grid Master support bundle.
Reporting servers support bundle.
Database backup from NIOS as well as from the reporting appliance.
Traffic capture from "All" ports of the reporting member. Run the capture for 5 minutes.