There is nothing in the probe to change this behavior.
I would suggest making sure you are on a supported platform and the latest version of the probe.
If you are then I would suggest opening a case as the dev team will need to investigate this as the probe should not lock any files open.
------------------------------
Gene Howard
Principal Support Engineer
Broadcom
------------------------------
Original Message:
Sent: 11-21-2019 06:53 AM
From: Sadashiv Srivastava
Subject: Logmon probe locks the file and UNIX team is unable to rotate the logs until UIM agent is restarted
Hi All,
We receive frequent alerts for /var filesystem full due to high utilization by /var/logs and from few days we are observing UIM agent keeps control on log files and don't release the locks post log rotation causes no change in filesystem utilization. And to release the lock we need to restart UIM agent and it immediately releases the /var/log space.
Do we have anything on the probe configuration which can change this behavior?
------------------------------
Associate Consultant
HCL Technologies Ltd
------------------------------