Preambulum:
Always confirm with OI Support, that you really need to reindex trails. We can provide you the aforementioned script.
Notes:
Preparation:
Copy the script to the core-shell's area, eg. I used this command:
scp scb/reindex_failed_sessions.py root@scbf.gyu.support.balabit:/mnt/firmware/root
Steps:
- I. VERY IMPORTANT: stop the pam pipeline service with this command in the core shell:
systemctl stop pam-pipeline.service
- II push back the trails for reindexing:
Other option to choose which trails to reindex is to use an expression what you could use on the search interface.
eg. I wanted to reindex in my test environment the trails what was recorded with the connection policy called tsgw.
I used this command to achive this goal:
(core/master/scbf-gyu)root@scb1:~# ./reindex_failed_sessions.py --dry-run --rest-search 'q=recording.connection_policy:tsgw&start=2019-04-01'
About to submit 6 sessions for reindexing
Not overwriting session (svc-5hpG4mqhWvKjRhyWWUF3N7-tsgw-13-1), index status: INDEXED
Not overwriting session (svc-5hpG4mqhWvKjRhyWWUF3N7-tsgw-8-1), index status: INDEXED
Not overwriting session (svc-5hpG4mqhWvKjRhyWWUF3N7-tsgw-5-1), index status: INDEXED
Not overwriting session (svc-5hpG4mqhWvKjRhyWWUF3N7-tsgw-19-1), index status: INDEXED
Not overwriting session (svc-5hpG4mqhWvKjRhyWWUF3N7-tsgw-10-1), index status: INDEXED
Not overwriting session (svc-5hpG4mqhWvKjRhyWWUF3N7-tsgw-17-1), index status: INDEXED
Since, in this case the trails were indexed already, nothing failed I had to use the --force-reindex switch.
So, actually my terminal at the end looked like this:
(core/master/scbf-gyu)root@scb1:~# ./reindex_failed_sessions.py --rest-search 'q=recording.connection_policy:tsgw&start=2019-04-01' --force-reindex
About to submit 6 sessions for reindexing
{
"job_id": "90cb2b221128492a9c960a544e99c06a"
}
...
{
"job_id": "30728a2ee91748be9ef73565ee8d10be"
}
(core/master/scbf-gyu)root@scb1:~# systemctl start pam-pipeline.service
- III. As you could see from the end of my previous command: start again the pam-pipeline service with this command:
systemctl start pam-pipeline.service
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy