Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Arskaz
Explorer

cp_log_export filters stopped working at some of latest R80.30 JHF

Hi!

We are using log_exporter to forward only "TP" events to siem. 

At some undefined point, latest log_exporter stopped working, when TP-filter is defined.

Some cmas still have the original log_exporter binary and they work fine.

After searching differences in target definitions, nothing found. The only difference was the log_exporter binary.

So, replaced the newer log_exporter binary with older one... IT WORKED!

So, I bet, there is a bug at least at R80.30 JHF 226.

Colleague is creating a case via support, I came this way...We'll see which way is faster to resolve this 😉

 

 

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

Nice you found a workaround but this is ultimately a bug that needs to be addressed through TAC.

0 Kudos