SHD appliance at 4.0.0. Deployed original version 3.0.2 from ova, with subsequent updates via the appliance. To reproduce, SSH to appliance and log in as root.

Mail is at /var/mail/root

Cron jobs are at /etc/cron.d. There is a file called sysstat that contains the following. Manually executing the sa1 script gives the output, "mkdir: cannot create directory ‘/var/log/sa’: File exists". The sa1 script is dated 2022-11-21, which is possibly when the problem was introduced, if it is the source.

# Run system activity accounting tool every 10 minutes
*/10 * * * * root /usr/lib/sa/sa1 1 1
# 0 * * * * root /usr/lib/sa/sa1 600 6
# Generate a text summary of previous day process accounting at 00:07
7 0 * * * root /usr/lib/sa/sa2 -A