IZ99304: LINUX OS AGENT CREATE DEFUNCT PROCESSES FOR GREP OWNED BY KLZAGENT WHEN USING LINUX_FILE_PATTERN ATTRIBUTE GROUP

IBM Tivoli Monitoring 6.2.2 Fix Pack 8 (6.2.2-TIV-ITM-FP0008)
IBM Tivoli Monitoring 6.2.2 Fix Pack 9 (6.2.2-TIV-ITM-FP0009)
IBM Tivoli Monitoring 6.2.2 Fix Pack 6 (6.2.2-TIV-ITM-FP0006)

APAR status

• Closed as program error.

Error description

• ITM 6.22 Monitoring Agent for Linux OS creates defunct processes
  with "klzagent" as the parent process ID (PPID).
  
  This can be seen by issuing "ps -ef | grep defunct" which will
  show defunct processes for "grep" commands:
  
  root     16322 14324  0 10:34 pts/3    00:00:00 [grep] <defunct>
  root     16392 14324  0 10:36 pts/3    00:00:00 [grep] <defunct>
  root     18193 14324  0 10:38 pts/3    00:00:00 [grep] <defunct>
  root     19788 14324  0 10:40 pts/3    00:00:00 [grep] <defunct>
  root     19884 14324  0 10:42 pts/3    00:00:00 [grep] <defunct>
  
  Checking the PPID of the defunct processes, in the above 14324,
  will show these were spawned by the LZ agent:
  
  root     14324     1  0 10:34 pts/3    00:00:00
    /opt/IBM/ITMlx8266/lz/bin/klzagent
  
  Review of the klzagent RAS1 log will show errors when collecting
  attribute data for the Linux_File_Pattern attribute group,
  specifically the Match_Count attribute which tracks the number
  of matches for the specified pattern in the specified file.
  
  Example with
   KBB_RAS1= Error (UNIT: KRA ALL) (UNIT: KLZ ALL) (UNIT: KCA ALL)
  
  kraatblm.cpp,519,"checkForExpiredRequests") Checking
  KLZ.LNXFILPAT
    for expired timers.
  kraafira.cpp,766,"DriveDataCollection") Entry
  kraafira.cpp,776,"DriveDataCollection") KLZ.LNXFILPAT,
  <###,###> <SITUATION_NAMED> expired.
  klz22agt.cpp,72,"TakeSample") Entry
  kraaprdf.cpp,265,"GetFilterInfo") Filter Object check
    column PARMA padding character in effect is 0x20
    length 22 22
  ...
  klz22agt.cpp,179,"TakeSample") Launching command:
  /bin/grep -c <FILE_NAME> "<PATTERN>"
  klz22agt.cpp,218,"TakeSample") grep output:
     grep: : No such file
  klz22agt.cpp,223,"TakeSample") ERROR:
     grep output not in the expected format: grep:
     : No such file
  klz22agt.cpp,253,"TakeSample") Match Count: -1
  Additional Keywords:
  LNXFILPAT.MATCHPAT
  CMVC defect 146935
  
  Local Fix:
  Stop situations that are collecting Linux_File_Pattern
  attribute group
  

Local fix

Problem summary

• Linux OS Agent creates defunct processes on agent machine.
  
  The Monitoring Agent for Linux OS creates defunct processes on
  the agent machine when the attribute "Match Count" of the
  attribute group "File Pattern" is used.
  

Problem conclusion

• The code was modified to wait for the child processes to end.
  
  
  The fix for this APAR is going to be included in the following
  maintenance vehicle:
      | fix pack | 6.2.2-TIV-ITM-FP0006
  

Temporary fix

• To avoid the creation of defunct processes, do not use the
  "Match Count" attribute.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ITM AGENT LINUX

• Fixed component ID

  5724C04LN

Applicable component levels

• R622 PSY

     UP