`__internal_schema`.audit_log突然没有最新的日志了，查看 fe.audit.log是有查询日志的

Question

Doris版本2.1.7
日志表从15:30开始突然没有新的查询日志了，查看 fe.audit.log是有查询日志的
SELECT *
FROM __internal_schema.audit_log
where 1=1
and time > '2025-06-16 15:30:00'

17号凌晨0点有突然又有了，但是16号15:30到17号0点之前的日志还是没有

阿渊@SelectDB · Answer

可能是导入有问题，看看 fe.log 中是不是有 Audit.log 导入失败的日志，当时BE节点的状态如何？

BingzZ · Answer

写audit_log的时候报-235的错，三点多的时候有个BE的CPU负载比较高
replay a ABORTED transaction TransactionState. transaction id: 187786212, label: audit_log_20250616_151024_10_58_130_23_9010, db id: 520374, table id list: 520451, callback id: -1, coordinator: BE: 10.58.130.37, transaction status: ABORTED, error replicas num: 0, replica ids: , prepare time: 1750057824632, commit time: -1, finish time: 1750057824646, reason: [CANCELLED][INTERNAL_ERROR]tablet error: tablet writer write failed, tablet_id=148114259, txn_id=187786212, err=[E-235]failed to init rowset builder. version count: 2050, exceed limit: 2000, tablet: 148114259. Please reduce the frequency of loading data or adjust the max_tablet_version_num in be.conf to a larger value., host: 10.58.130.153

`__internal_schema`.audit_log突然没有最新的日志了，查看 fe.audit.log是有查询日志的

2 Answers