IDC Syslog Parser wont receive Syslogs from ClearPass

[NemmerAlex]

Hi,

i just configured our HP ClearPass to send syslogs to my Identity Collector. I added the IP from the ClearPass with port 514 udp.
I also disabled the windows Firewall. The IDC still wont receive any events. 
Does anyone have an idea why i wont receive any events?

[PhoneBoy]

Have you used something like Wireshark to confirm traffic is reaching your IDC system?

[NemmerAlex]

Yes i can see the syslogs in Wireshark via UDP 514. But they wont show up on the Received Events on the IDC

[PhoneBoy]

Perhaps there is something in the various debug log files that might explain it: https://sc1.checkpoint.com/documents/Identity_Awareness_Clients_Admin_Guide/Content/Topics-IA-Client... 
Otherwise, I suggest engaging with TAC.