Restart broker 24.10 on remote server

Hi ​@S.lhotellier can you enable debug mode on your pollers:

• Edit /etc/sysconfig/gorgoned
• Change line to:

OPTIONS="--config=/etc/centreon-gorgone/config.yaml --logfile=/var/log/centreon-gorgone/gorgoned.log --severity=debug"

• Restart process:

systemctl restart gorgoned

• Then analyse file to try to determine which command doesn’t work when exporting configuration from your Central server:

tail -f /var/log/centreon-gorgone/gorgoned.log

Regards,

Hi 

soory for the late response  : 

2025-03-21 09:46:03 - DEBUG - [audit] sampling starting
2025-03-21 09:46:06 - DEBUG - [pull] read message from external: [ACTIONENGINE] [ae22ed84f4cb6e2b54a6eeeb9d0cb50bc3c055068495aeeb0862904c46817419a077a44a5d5555da953eaf8373fe522fa6fd4fa399485736d0b25472d4ad9d17] [25] {"logging":0,"content":{"command":"sudo systemctl restart centreon_vmware.service","metadata":{"centcore_proxy":1,"centcore_cmd":"ENGINERESTART"}}}
2025-03-21 09:46:06 - DEBUG - [pull] internal message: [ACTIONENGINE] [ae22ed84f4cb6e2b54a6eeeb9d0cb50bc3c055068495aeeb0862904c46817419a077a44a5d5555da953eaf8373fe522fa6fd4fa399485736d0b25472d4ad9d17] [25] {"logging":0,"content":{"command":"sudo systemctl restart centreon_vmware.service","metadata":{"centcore_proxy":1,"centcore_cmd":"ENGINERESTART"}}}
2025-03-21 09:46:06 - DEBUG - [pull] read message from external: [ACTIONENGINE] [ae22ed84f4cb6e2b54a6eeeb9d0cb50bc3c055068495aeeb0862904c46817419a077a44a5d5555da953eaf8373fe522fa6fd4fa399485736d0b25472d4ad9d17] [25] {"content":{"plugins":"/etc/centreon-engine//plugins.json","command":"sudo service centengine restart","metadata":{"centcore_cmd":"ENGINERESTART","centcore_proxy":1}},"logging":0}
2025-03-21 09:46:06 - DEBUG - [pull] internal message: [ACTIONENGINE] [ae22ed84f4cb6e2b54a6eeeb9d0cb50bc3c055068495aeeb0862904c46817419a077a44a5d5555da953eaf8373fe522fa6fd4fa399485736d0b25472d4ad9d17] [25] {"content":{"plugins":"/etc/centreon-engine//plugins.json","command":"sudo service centengine restart","metadata":{"centcore_cmd":"ENGINERESTART","centcore_proxy":1}},"logging":0}
2025-03-21 09:46:06 - DEBUG - [core] Message received internal - [ACTIONENGINE] [ae22ed84f4cb6e2b54a6eeeb9d0cb50bc3c055068495aeeb0862904c46817419a077a44a5d5555da953eaf8373fe522fa6fd4fa399485736d0b25472d4ad9d17] [25] {"logging":0,"content":{"command":"sudo systemctl restart centreon_vmware.service","metadata":{"centcore_proxy":1,"centcore_cmd":"ENGINERESTART"}}}
2025-03-21 09:46:06 - DEBUG - [core] Message received internal - [ACTIONENGINE] [ae22ed84f4cb6e2b54a6eeeb9d0cb50bc3c055068495aeeb0862904c46817419a077a44a5d5555da953eaf8373fe522fa6fd4fa399485736d0b25472d4ad9d17] [25] {"content":{"plugins":"/etc/centreon-engine//plugins.json","command":"sudo service centengine restart","metadata":{"centcore_cmd":"ENGINERESTART","centcore_proxy":1}},"logging":0}
2025-03-21 09:46:06 - DEBUG - [action] Event: [ACTIONENGINE] [ae22ed84f4cb6e2b54a6eeeb9d0cb50bc3c055068495aeeb0862904c46817419a077a44a5d5555da953eaf8373fe522fa6fd4fa399485736d0b25472d4ad9d17] [] {"logging":0,"content":{"command":"sudo systemctl restart centreon_vmware.service","metadata":{"centcore_proxy":1,"centcore_cmd":"ENGINERESTART"}}}
2025-03-21 09:46:06 - DEBUG - [action] Create sub-process
2025-03-21 09:46:06 - DEBUG - [action] Event: [ACTIONENGINE] [ae22ed84f4cb6e2b54a6eeeb9d0cb50bc3c055068495aeeb0862904c46817419a077a44a5d5555da953eaf8373fe522fa6fd4fa399485736d0b25472d4ad9d17] [] {"content":{"plugins":"/etc/centreon-engine//plugins.json","command":"sudo service centengine restart","metadata":{"centcore_cmd":"ENGINERESTART","centcore_proxy":1}},"logging":0}
2025-03-21 09:46:06 - DEBUG - [action] Create sub-process
2025-03-21 09:46:06 - INFO - connection to zmq socket : ipc:///tmp/gorgone/routing-174254273772754.ipc
2025-03-21 09:46:06 - INFO - connection to zmq socket : ipc:///tmp/gorgone/routing-174254273772754.ipc
2025-03-21 09:46:08 - DEBUG - [action] Received SIGCLD signal (pid: 7942)
2025-03-21 09:46:08 - DEBUG - [action] Received SIGCLD signal (pid: 7943)
^C
[root@localhost DBD-Oracle-1.90]# systemctl status centreon_vmware.service
● centreon_vmware.service - Centreon VMWare
     Loaded: loaded (/etc/systemd/system/centreon_vmware.service; disabled; preset: disabled)
     Active: active (running) since Fri 2025-03-21 09:43:03 CET; 3min 14s ago
   Main PID: 7650 (perl)
      Tasks: 7 (limit: 52428)
     Memory: 32.8M
        CPU: 277ms
     CGroup: /system.slice/centreon_vmware.service
             └─7650 /usr/bin/perl /usr/bin/centreon_vmware.pl --config-extra=/etc/centreon/centreon_vmware.json --logfile=/var/log/centreon/centreon_vmware.log --severity=info

mars 21 09:43:03 localhost.localdomain systemd[1]: Started Centreon VMWare.
[root@localhost DBD-Oracle-1.90]# systemctl status cbd.service
● cbd.service - Centreon Broker watchdog
     Loaded: loaded (/usr/lib/systemd/system/cbd.service; enabled; preset: disabled)
     Active: active (running) since Fri 2025-03-21 08:37:08 CET; 1h 9min ago
   Main PID: 1789 (cbwd)
      Tasks: 38 (limit: 52428)
     Memory: 59.9M
        CPU: 45.161s
     CGroup: /system.slice/cbd.service
             ├─1789 /usr/sbin/cbwd /etc/centreon-broker/watchdog.json
             ├─1798 /usr/sbin/cbd /etc/centreon-broker/db-schneker_cdg_centreon_dbscdgsm-broker.json
             └─1799 /usr/sbin/cbd /etc/centreon-broker/db-schneker_cdg_centreon_dbscdgsm-rrd.json

mars 21 08:37:08 localhost.localdomain systemd[1]: Started Centreon Broker watchdog.
mars 21 08:37:08 localhost.localdomain cbwd[1799]: [2025-03-21T08:37:08.097+01:00] [core] [info] Centreon Broker 24.10.5
mars 21 08:37:08 localhost.localdomain cbwd[1798]: [2025-03-21T08:37:08.097+01:00] [core] [info] Centreon Broker 24.10.5
mars 21 08:37:08 localhost.localdomain cbwd[1799]: [2025-03-21T08:37:08.098+01:00] [core] [info] Copyright 2009-2021 Centreon
mars 21 08:37:08 localhost.localdomain cbwd[1798]: [2025-03-21T08:37:08.098+01:00] [core] [info] Copyright 2009-2021 Centreon
mars 21 08:37:08 localhost.localdomain cbwd[1799]: [2025-03-21T08:37:08.098+01:00] [core] [info] License ASL 2.0 <http://www.apache.org/licenses/LICENSE-2.0>
mars 21 08:37:08 localhost.localdomain cbwd[1798]: [2025-03-21T08:37:08.098+01:00] [core] [info] License ASL 2.0 <http://www.apache.org/licenses/LICENSE-2.0>
[root@localhost DBD-Oracle-1.90]# systemctl status centengine.service
● centengine.service - Centreon Engine
     Loaded: loaded (/usr/lib/systemd/system/centengine.service; enabled; preset: disabled)
     Active: active (running) since Fri 2025-03-21 08:37:08 CET; 1h 9min ago
   Main PID: 1790 (centengine)
      Tasks: 20 (limit: 52428)
     Memory: 37.5M
        CPU: 59.826s
     CGroup: /system.slice/centengine.service
             └─1790 /usr/sbin/centengine /etc/centreon-engine/centengine.cfg

mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.120+01:00] [config] [info] Processing object config file '/etc/centreon-engine/escalations.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.120+01:00] [config] [info] Processing object config file '/etc/centreon-engine/dependencies.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.121+01:00] [config] [info] Processing object config file '/etc/centreon-engine/connectors.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.121+01:00] [config] [info] Processing object config file '/etc/centreon-engine/meta_commands.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.122+01:00] [config] [info] Processing object config file '/etc/centreon-engine/meta_timeperiod.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.122+01:00] [config] [info] Processing object config file '/etc/centreon-engine/meta_host.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.122+01:00] [config] [info] Processing object config file '/etc/centreon-engine/meta_services.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.123+01:00] [config] [info] Processing object config file '/etc/centreon-engine/tags.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.123+01:00] [config] [info] Processing object config file '/etc/centreon-engine/severities.cfg'
mars 21 08:37:08 localhost.localdomain centengine[1790]: [2025-03-21T08:37:08.124+01:00] [config] [info] Reading resource file '/etc/centreon-engine/resource.cfg'
 

I also tried changing the restart commands from "service" to systemctl

Hi

A few clarifications on my last replies, sent a little hastily.
So I also ran the tests by replacing "service XXX restart" with "systemctl restart XXX" because I noticed that sudo commands from the centreo-engine account only worked in systemctl.
As you can see in the status command results, none of the services are restarted (see the delay on the restart times).

on test this morning : 

/var/log/secure : 

Mar 24 08:28:15 localhost sudo[4332]: centreon-gorgone : no tty ; PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl restart centengine
Mar 24 08:28:15 localhost sudo[4329]: centreon-gorgone : no tty ; PWD=/ ; USER=root ; COMMAND=/bin/systemctl restart centreon_vmware.service

nothing in /var/log/messages

/var/log/audit : 

type=USER_CMD msg=audit(1742801690.444:133525): pid=4741 uid=980 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=73797374656D63746C20726573746172742063656E7472656F6E5F766D776172652E73657276696365 exe="/usr/bin/sudo" terminal=? res=failed'UID="centreon-gorgone" AUID="unset"
type=USER_CMD msg=audit(1742801690.450:133526): pid=4744 uid=980 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=73797374656D63746C20726573746172742063656E74656E67696E65 exe="/usr/bin/sudo" terminal=? res=failed'UID="centreon-gorgone" AUID="unset"

type=USER_ACCT msg=audit(1742801701.715:133527): pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_faillock,pam_unix,pam_localuser acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1742801701.715:133528): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_faillock,pam_unix,pam_localuser acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1742801701.715:133529): pid=4749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_faillock,pam_unix,pam_localuser acct="centreon" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1742801701.715:133530): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_faillock,pam_unix,pam_localuser acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1742801701.715:133531): pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1742801701.715:133532): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1742801701.715:133533): pid=4749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="centreon" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1742801701.715:133534): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1742801701.716:133535): pid=4748 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=48 tty=(none) old-ses=4294967295 ses=15567 res=1UID="root" OLD-AUID="unset" AUID="apache"
type=SYSCALL msg=audit(1742801701.716:133535): arch=c000003e syscall=1 success=yes exit=2 a0=3 a1=7ffe3360e490 a2=2 a3=30 items=0 ppid=1210 pid=4748 auid=48 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15567 comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="apache" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1742801701.716:133535): proctitle=2F7573722F7362696E2F63726F6E64002D6E
type=LOGIN msg=audit(1742801701.716:133536): pid=4751 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=48 tty=(none) old-ses=4294967295 ses=15568 res=1UID="root" OLD-AUID="unset" AUID="apache"
type=SYSCALL msg=audit(1742801701.716:133536): arch=c000003e syscall=1 success=yes exit=2 a0=3 a1=7ffe3360e490 a2=2 a3=30 items=0 ppid=1210 pid=4751 auid=48 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15568 comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="apache" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=LOGIN msg=audit(1742801701.716:133537): pid=4749 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=982 tty=(none) old-ses=4294967295 ses=15569 res=1UID="root" OLD-AUID="unset" AUID="centreon"
type=PROCTITLE msg=audit(1742801701.716:133536): proctitle=2F7573722F7362696E2F63726F6E64002D6E
type=LOGIN msg=audit(1742801701.716:133538): pid=4750 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=48 tty=(none) old-ses=4294967295 ses=15570 res=1UID="root" OLD-AUID="unset" AUID="apache"
type=SYSCALL msg=audit(1742801701.716:133537): arch=c000003e syscall=1 success=yes exit=3 a0=3 a1=7ffe3360e490 a2=3 a3=3d6 items=0 ppid=1210 pid=4749 auid=982 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15569 comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="centreon" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1742801701.716:133537): proctitle=2F7573722F7362696E2F63726F6E64002D6E
type=SYSCALL msg=audit(1742801701.716:133538): arch=c000003e syscall=1 success=yes exit=2 a0=3 a1=7ffe3360e490 a2=2 a3=30 items=0 ppid=1210 pid=4750 auid=48 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15570 comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="apache" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1742801701.716:133538): proctitle=2F7573722F7362696E2F63726F6E64002D6E
type=SERVICE_START msg=audit(1742801701.772:133539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@48 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1742801701.788:133540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1742801701.800:133541): pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="apache" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1742801701.801:133542): pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="apache" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1742801701.802:133543): pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1742801701.802:133544): pid=4760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="centreon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1742801701.802:133545): pid=4760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="centreon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1742801701.803:133546): pid=4760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1742801701.803:133547): pid=4758 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=48 tty=(none) old-ses=4294967295 ses=15571 res=1UID="root" OLD-AUID="unset" AUID="apache"
type=LOGIN msg=audit(1742801701.803:133548): pid=4760 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=982 tty=(none) old-ses=4294967295 ses=15572 res=1UID="root" OLD-AUID="unset" AUID="centreon"
type=SYSCALL msg=audit(1742801701.803:133548): arch=c000003e syscall=1 success=yes exit=3 a0=7 a1=7fff73eb3440 a2=3 a3=3d6 items=0 ppid=1 pid=4760 auid=982 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15572 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="centreon" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=SYSCALL msg=audit(1742801701.803:133547): arch=c000003e syscall=1 success=yes exit=2 a0=7 a1=7fff73eb3440 a2=2 a3=30 items=0 ppid=1 pid=4758 auid=48 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15571 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="apache" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1742801701.803:133548): proctitle="(systemd)"
type=PROCTITLE msg=audit(1742801701.803:133547): proctitle="(systemd)"
type=USER_START msg=audit(1742801701.820:133549): pid=4760 uid=0 auid=982 ses=15572 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_umask,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="centreon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="centreon"
type=USER_START msg=audit(1742801701.828:133550): pid=4758 uid=0 auid=48 ses=15571 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_umask,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="apache" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="apache"
type=SERVICE_START msg=audit(1742801702.045:133551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@48 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1742801702.060:133552): pid=4748 uid=0 auid=48 ses=15567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=CRED_REFR msg=audit(1742801702.061:133553): pid=4748 uid=0 auid=48 ses=15567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=SERVICE_START msg=audit(1742801702.061:133554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1742801702.068:133555): pid=4751 uid=0 auid=48 ses=15568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=CRED_REFR msg=audit(1742801702.069:133556): pid=4751 uid=0 auid=48 ses=15568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=USER_START msg=audit(1742801702.074:133557): pid=4750 uid=0 auid=48 ses=15570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=CRED_REFR msg=audit(1742801702.075:133558): pid=4750 uid=0 auid=48 ses=15570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=USER_START msg=audit(1742801702.081:133559): pid=4749 uid=0 auid=982 ses=15569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="centreon" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="centreon"
type=CRED_REFR msg=audit(1742801702.082:133560): pid=4749 uid=0 auid=982 ses=15569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="centreon" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="centreon"
type=CRED_DISP msg=audit(1742801702.160:133561): pid=4748 uid=0 auid=48 ses=15567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=USER_END msg=audit(1742801702.162:133562): pid=4748 uid=0 auid=48 ses=15567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=CRED_DISP msg=audit(1742801702.175:133563): pid=4750 uid=0 auid=48 ses=15570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=USER_END msg=audit(1742801702.176:133564): pid=4750 uid=0 auid=48 ses=15570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=CRED_DISP msg=audit(1742801702.208:133565): pid=4749 uid=0 auid=982 ses=15569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="centreon" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="centreon"
type=USER_END msg=audit(1742801702.208:133566): pid=4749 uid=0 auid=982 ses=15569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="centreon" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="centreon"
type=CRED_DISP msg=audit(1742801702.238:133567): pid=4751 uid=0 auid=48 ses=15568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_fprintd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=USER_END msg=audit(1742801702.239:133568): pid=4751 uid=0 auid=48 ses=15568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="apache" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="apache"
type=SERVICE_STOP msg=audit(1742801712.358:133569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1742801712.363:133570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@48 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSCALL msg=audit(1742801712.400:133571): arch=c000003e syscall=84 success=no exit=-2 a0=55942adcc0f0 a1=1 a2=0 a3=0 items=1 ppid=1 pid=2717 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=7 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="delete"ARCH=x86_64 SYSCALL=rmdir AUID="fsyadmin" UID="fsyadmin" GID="fsyadmin" EUID="fsyadmin" SUID="fsyadmin" FSUID="fsyadmin" EGID="fsyadmin" SGID="fsyadmin" FSGID="fsyadmin"
type=CWD msg=audit(1742801712.400:133571): cwd="/"
 

Central: 24.10.5
Remote server: 24.10.5
OS: Oracle Linux 9.4

SELinux : Permissive

Best regards