Log Exporter stopped sending logs

[Equipe_Support]

Hi There,

The Log Exporter was working normaly on the FW, and  without any modification on FW, the Log Exporter stopped sending the logs, we got the following:

[log_indexer ...]@xGW[DATE TIME] SyslogTCPSender::connect: Failed to initialize socket (:port)
[log_indexer ...]@xGW[DATE TIME] TcpTlsSender::connect: Failed to create socket.

And after a few days, Log Exporter started sending the logs.

I thought the cause is "The target server in the Log Exporter configuration is a hostname instead of an IP address" (sk167100). But when I run " #cp_log_export show " , we can see clearly that the traget server is the IP and not the hostname.

             Name: "------"
                enabled: true
                target-server: "IP"
                protocol: tcp
                format: syslog
                read-mode: found
                encrypted: true

Could you help me please to understand this incident?
Is there a way to monitor this process to be immediately notified in case of recurrence?

[PhoneBoy]

Recommend engaging with the TAC here.