- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: Cannot add log server to smartevent
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cannot add log server to smartevent
We have configured SmartEvent R80.10 (dedicated) and by following sk110894 gotten av few domains and logs into SmartEvent.
(We get the "Correlating logs to events. The log correlation unit is not able to read logs from Log server: . Please run 'cpstat cpsead' " but we see logs and events, so we're assuming this is cosmetic).
However, we are _only_ so far able to add logs from domains where the firewall logs to a dedicated log server. If the firewalls in the domain we add log to the management, it does not appear in "General settings -> Inital settings -> Correlation Units -> Add (select domain where firewall logs to managment (not do dedicated log server).
Anybody seen anything similar.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is a known limitation currently that we plan to resolve in the near future.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Does anyone know if this is still a limitation ? I've just come across it in R80.30
thanks
Pete
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are we talking about an R80.10/R80.30 SME managed by an R77.30 MDS?
where the CMA/DMS, which is the actual log-server of the GW cannot be seen as a Log-Server to to choose from in the SmartEvent's GUI log-server list?
(while a CLM/DLS of MLM can be seen & picked)?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm talking about R80.30 MDS with R80.30 SmartEvent where the CMA on the MDS is also the log server.
For some reason I cannot pull the correct domain from the R80.30 SmartEvent or the Log server (CMA)
I also tried a separate log server and several install databases but to no good outcome.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Apparently its a known issue, but no public SK available about it.
I now have a portfix to try
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
