If there is a corrupt file in the /evcache/events directory, pmlogsrvd doesn't not handle it correctly. It keeps on trying to process it, and reporting the "Invalid start record" message. This may also result in a large number of unprocessed files in the /evcache/events directory.
Product Defect
This fix for this issue has been implemented in Safeguard for Sudo 7.1.1.4
Therefore, any later version will also have this fix in place.
https://support.oneidentity.com/safeguard-for-sudo/
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center