cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
Enyi_Ajoku
Nickel

All online jobs-The Correlation Unit can't connect to one of its Log Servers

Had to shutdown over the weekend for some power installation. Got in this morning, booted up the management station (R80.10) and had this error

Warning (All online jobs-The Correlation Unit can't connect to one of its Log Servers. Please make sure connectivity between the Correlation Unit and Log Server isn't blocked. There is no need to stop the job.)

Would appreciate all the help

Thank You

 

 

0 Kudos
6 Replies
Admin
Admin

Re: All online jobs-The Correlation Unit can't connect to one of its Log Servers

What exactly have you done to troubleshoot the issue?
Have you verified basic IP connectivity?
May also want to check that various ports are reachable.
See: https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/R80-x-Ports-Used-for-Communicatio...
0 Kudos
cp
Iron

Re: All online jobs-The Correlation Unit can't connect to one of its Log Servers

Hello

i have same issue.

firewall and managemet can access one to other. i applied sk111631. but not resolved.

do you have any other suggest?

 

Thanks

0 Kudos

Re: All online jobs-The Correlation Unit can't connect to one of its Log Servers

Of course - contact TAC, have a quick RAS and all will be up and running again...

0 Kudos
cp
Iron

Re: All online jobs-The Correlation Unit can't connect to one of its Log Servers

i saw this message on $RTDIR/log/cpsead.elg

Warning:cp_timed_blocker_handler: A handler [0xf742ab10] blocked for 60 seconds.
Warning:cp_timed_blocker_handler: Handler info: Library [/opt/CPshrd-R80.30/lib/libopsec.so], Function offset [0x25b10

 

0 Kudos

Re: All online jobs-The Correlation Unit can't connect to one of its Log Servers

Looks like the error from sk147652 SmartEvent policy installation fails with memory allocation error - you better contact TAC...

0 Kudos
Ants
Nickel

Re: All online jobs-The Correlation Unit can't connect to one of its Log Servers

I've seen this error before after management upgrade from 80.10 to 80.30 - might be unrelated

in our case. the fwopsec.conf got overwritten and the lea ports were ignored..

removed # and added 'lea_server auth_port 18184'  back and cpstop/cpstart which fixed the error as on our config at least correlation unit uses this port to connect..

cheers

 

0 Kudos