# Node suspended - how is it possible?

**URL:** <https://forum.storj.io/t/node-suspended-how-is-it-possible/17071>\
**Category:** troubleshooting\
**Tags:** suspension\
**Created:** [February 3, 2022, 9:59am UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071 "2022-02-03T09:59:49Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![naxbc](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/naxbc/32/1125_2.png) [@naxbc](https://forum.storj.io/u/naxbc)\
**Post date:** [February 3, 2022, 9:59am UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/1 "2022-02-03T09:59:49Z")

</div>

Hi guys.  
Please provide me your insights as this doesn´t make any sense:

 ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/9/97083a9ce6307c5136e7a9eeff11fd090df47ad1.png)

How´s this even possible considering it shows over 95% online?

---

<div class="post-metadata">

**Author:** ![Bivvo](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/bivvo/32/7825_2.png) [@Bivvo](https://forum.storj.io/u/Bivvo)\
**Post date:** [February 3, 2022, 10:11am UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/2 "2022-02-03T10:11:35Z")

</div>

Hi. You need to have a look into the log files - I assume your files are corrupt and could not be audited. Please analyze and share an excerpt of the errors from your logs.

---

<div class="post-metadata">

**Author:** ![naxbc](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/naxbc/32/1125_2.png) [@naxbc](https://forum.storj.io/u/naxbc)\
**Post date:** [February 3, 2022, 10:16am UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/3 "2022-02-03T10:16:31Z")

</div>

Edited 2:  
What command should I use to have those logs?  
Using sudo docker logs --follow --tail 50 storagenode I can´t see erros, just uploads and downloads.

In the time I posted this now I have this:

 ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/6/6ac42e90645ef18c975198a9d5a5191954d4ce01.png)

Something is not correct.

I also add that this node is over 2 years old.

One hour later:

 ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/4/48a9c1918c21f9becac308ed30a5563be9bb438b.png)

Could this be something related to 1.47.3?

---

<div class="post-metadata">

**Author:** ![Alexey](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/alexey/32/41_2.png) [@Alexey](https://forum.storj.io/u/Alexey)\
**Post date:** [February 3, 2022, 6:01pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/4 "2022-02-03T18:01:55Z")

</div>

There are two events which can lead to suspension:

1. Downtime. The online score is below 60%, and it will recover in the next 30 days online. The suspension score will not be affected (will be 100%).
2. Unknown audit errors - suspension score will start to drop. Below 60% and node become suspended. The next stage - drop in audit score and disqualification. Will recover with each successful audit.

You have a second, very dangerous case.  
Please, check your logs why your node failed audits with unknown errors: [https://support.storj.io/hc/en-us/articles/360042257912-Suspension-mode](https://support.storj.io/hc/en-us/articles/360042257912-Suspension-mode)

---

<div class="post-metadata">

**Author:** ![naxbc](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/naxbc/32/1125_2.png) [@naxbc](https://forum.storj.io/u/naxbc)\
**Post date:** [February 3, 2022, 7:27pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/5 "2022-02-03T19:27:45Z")

</div>

Hi Alexei,

No output:

 ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/6/63fe96ba78f739b514bd50d3036c6d50d24f2899.png)

And this is the current dashboard:

 ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/d/deb24e242f600df795a8cd71cf62906da0708b61.png)

Very odd…did it recover so fast from suspension?

---

<div class="post-metadata">

**Author:** ![Alexey](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/alexey/32/41_2.png) [@Alexey](https://forum.storj.io/u/Alexey)\
**Post date:** [February 3, 2022, 7:40pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/6 "2022-02-03T19:40:31Z")

</div>

Please, try to search for `ERROR` instead of `failed`.  
By the way, did you re-create a container? If so, then your previous logs are lost. So may be we will never know what’s was the reason.

Yes, the recovering from suspension when the suspension score is affected could be fast, if the problem were fixed, unlike online score. Because suspension score is recovering with the each successful audit.  
Keep going!

---

<div class="post-metadata">

**Author:** ![naxbc](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/naxbc/32/1125_2.png) [@naxbc](https://forum.storj.io/u/naxbc)\
**Post date:** [February 3, 2022, 8:25pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/7 "2022-02-03T20:25:47Z")

</div>

Nothing as well using “error”:

 ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/f/f866a234492ffc0238cc8617fcb6a02666a72d80.png)

No, container was not recreated.

---

<div class="post-metadata">

**Author:** ![BrightSilence](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/brightsilence/32/6048_2.png) [@BrightSilence](https://forum.storj.io/u/BrightSilence)\
**Post date:** [February 3, 2022, 9:42pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/8 "2022-02-03T21:42:14Z")

</div>

grep is case sensitive, you have to search for ERROR or add -i parameter.

Your node is quite old, which means it gets a lot of audits and repair. This causes scores to respond really fast. So fast drops and fast recovery. I think you may have had a really temporary issue.

@Alexey: I am noticing issues with dropping suspension are happening more frequently recently. And unlike before it seems we haven’t been able to determine the cause of the suspension in many of the cases. I don’t really know what the commonality between these cases is yet, but it may be good to mention this to the team to see if they have some idea what might be causing this. Mean while, lets keep an eye out for more reports. It’s clearly not a massive issue yet as the forum would be flooded with reports if that were the case. But we haven’t really seen reports to this extent before either. And the reports we have seen were usually easily clarified. I am especially curious since this is now happening to a long time node operator like @naxbc. Checking back, they have had drops in suspension score before, but seemingly always with clearly identifiable cause. (Disk mount issues, old version, things like that) Food for thought.

---

<div class="post-metadata">

**Author:** ![naxbc](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/naxbc/32/1125_2.png) [@naxbc](https://forum.storj.io/u/naxbc)\
**Post date:** [February 3, 2022, 10:05pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/9 "2022-02-03T22:05:04Z")

</div>

Thank you, didn’t know that.  
Will repeat the process with capital letters and report back.  
Worth mentioning I have a daily reboot scheduled and this happened on a Synology DS 412+ latest DSM.  
I know I didn’t had downtime; I have UpTimeRobot monitoring and also have fairly IT knowledge as I’m an Sys Admin.  
I’m also replicating data to a Windows computer while the node is running using robocopy in order to expand it.  
Still, the sync process is running for over 9 days and only now this happened.  
Let me know if I can be helpful in some troubleshooting for the community.

---

<div class="post-metadata">

**Author:** ![BrightSilence](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/brightsilence/32/6048_2.png) [@BrightSilence](https://forum.storj.io/u/BrightSilence)\
**Post date:** [February 3, 2022, 10:07pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/10 "2022-02-03T22:07:07Z")

</div>

> [@naxbc](#):
>
> I’m also replicating data to a Windows computer while the node is running using robocopy in order to expand it.

This could put significant load on your storage though. It’s possible that caused audits to time out. Also be careful with the db files. You don’t want to copy them over SMB with the node running as that could lead to corruption.

---

<div class="post-metadata">

**Author:** ![Bivvo](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/bivvo/32/7825_2.png) [@Bivvo](https://forum.storj.io/u/Bivvo)\
**Post date:** [February 3, 2022, 10:18pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/11 "2022-02-03T22:18:47Z")

</div>

> [@BrightSilence](#):
>
> You don’t want to copy them over SMB with the node running as that could lead to corruption.

That underlines my thoughts on my recent suspension issues down to ~70%, related to issues mentioned in [this post](https://forum.storj.io/t/unexpected-shutdown-of-a-runner-not-a-directory/17046/22): everything which could block db reads/writes can cause damage to the node somehow. In my case Time Machine backups on MacOS; before that, SMB issues as well.

Nevertheless, I use all these learnings and failures to extend and tune the [health check monitoring script](https://forum.storj.io/t/howto-storage-node-health-check-discord-email-alerting-script/16461) - I strongly advise to use that, in case you don’t have a monitoring tool to recognize errors yet.

I made the experience it makes you nervous, when alerts are fired, but you can react very quickly, before seeing your node being suspended or disqualified:

> [@Howto: storage node health check \> discord + email alerting script](https://forum.storj.io/t/howto-storage-node-health-check-discord-email-alerting-script/16461):
>
> Hi there, based on my ideas and findings from one of my previous [posts](https://forum.storj.io/t/logs-how-to-send-relevant-log-messages-to-a-discord-web-hook/16140), I have published my “health check script (linux + macOS)” on [GitHub](https://github.com/bjoerrrn/storj-system-health.sh). partying_face Please feel free to support, subscribe or comment. I’ll release updates soon, in order to make it more self-descriptive and common to use for everyday usage. bulb Target group: docker and linux / macOS users. about this script this linux shell script checks, if a storj node runs into errors and alerts the operator by discord push me…

---

<div class="post-metadata">

**Author:** ![naxbc](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/naxbc/32/1125_2.png) [@naxbc](https://forum.storj.io/u/naxbc)\
**Post date:** [February 3, 2022, 10:38pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/12 "2022-02-03T22:38:35Z")

</div>

Thank you @BrightSilence and @Bivvo for your insights; could make sense.  
On the other hand, shoudn´t it appear as such in the logs?  
Btw, any suggestions on how to sync data between Synology and Windows? Tried rsync but I was unable to make it run on Windows 10.  
Mapping Synology Volume on Windows and use Robocopy was the only method working.  
Taking a huge amount of time thought ☹

@Alexey nothing with capitals:

 ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/2/275a9c359f3f397bff9404874a14ac15f4e23d4d.png)

---

<div class="post-metadata">

**Author:** ![BrightSilence](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/brightsilence/32/6048_2.png) [@BrightSilence](https://forum.storj.io/u/BrightSilence)\
**Post date:** [February 3, 2022, 10:50pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/13 "2022-02-03T22:50:12Z")

</div>

> [@naxbc](#):
>
> Mapping Synology Volume on Windows and use Robocopy was the only method working.

That’s fine for migrating blobs and trash. The rest is tiny anyway. Just migrate those and copy the rest when the node is stopped during the last robocopy run.

---

<div class="post-metadata">

**Author:** ![Bivvo](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/bivvo/32/7825_2.png) [@Bivvo](https://forum.storj.io/u/Bivvo)\
**Post date:** [February 3, 2022, 10:50pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/14 "2022-02-03T22:50:33Z")

</div>

> [@naxbc](#):
>
> On the other hand, shoudn´t it appear as such in the logs?

If you had audit failures, this should work:

```auto
docker logs storagenode 2>&1 | grep -E 'GET_AUDIT' | grep 'failed'

```

In case of other fatal issues:

```auto
docker logs storagenode 2>&1 | grep 'FATAL' 

```

General errors:

```auto
docker logs storagenode 2>&1 | grep 'ERROR' | grep -v -e 'INFO' -e 'FATAL' -e 'collector' -e 'piecestore' -e 'pieces error: filestore error: context canceled' -e 'piecedeleter' -e 'emptying trash failed' -e 'service ping satellite failed'

docker logs storagenode 2>&1 | grep -i -e 'error:' -e 'fatal:' -e 'unexpected shutdown' -e 'fatal error' -e 'transport endpoint is not connected' -e 'Unable to read the disk' -e 'software caused connection abort' | grep -v -e 'emptying trash failed' -e 'INFO' -e 'FATAL' -e 'collector' -e 'piecestore' -e 'pieces error: filestore error: context canceled' -e 'piecedeleter' -e 'emptying trash failed' -e 'service ping satellite failed'

```

(Statements can be tuned for sure.)

grep GET\_AUDIT in combination with ERROR won’t work.

---

<div class="post-metadata">

**Author:** ![BrightSilence](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/brightsilence/32/6048_2.png) [@BrightSilence](https://forum.storj.io/u/BrightSilence)\
**Post date:** [February 3, 2022, 10:53pm UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/15 "2022-02-03T22:53:26Z")

</div>

> [@BrightSilence](#):
>
> @Alexey: I am noticing issues with dropping suspension are happening more frequently recently

Hrmm, this may have been premature if two of these have now at least partially been explained.

---

<div class="post-metadata">

**Author:** ![Alexey](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/alexey/32/41_2.png) [@Alexey](https://forum.storj.io/u/Alexey)\
**Post date:** [February 4, 2022, 6:06am UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/16 "2022-02-04T06:06:30Z")

</div>

> [@Bivvo](#):
>
> If you had audit failures, this should work:
> 
> ```auto
> docker logs storagenode 2>&1 | grep -E 'GET_AUDIT' | grep 'failed'
> 
> ```

You need to add `GET_REPAIR` too, it affects audits as well.

---

<div class="post-metadata">

**Author:** ![littleskunk](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/littleskunk/32/63_2.png) [@littleskunk](https://forum.storj.io/u/littleskunk)\
**Post date:** [February 4, 2022, 6:52am UTC](https://forum.storj.io/t/node-suspended-how-is-it-possible/17071/17 "2022-02-04T06:52:54Z")

</div>

Let me advertise my grafana dashboard here as well: [[Tech Preview] Email alerts with Grafana and Prometheus](https://forum.storj.io/t/tech-preview-email-alerts-with-grafana-and-prometheus/16156)

It doesn’t help you to find out what happened before but it will help you in case this might happen again. The grafana dashboard can send you an email alert as soon as your audit success rate is too low.
