- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- log Exporter error
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
log Exporter error
Hello Guys,
Single CMA R80.40 T29 getting error below both on production and lab environments. Anyone come across this issue? Upgrading to a higher take is not an option as upgrading to T102 (log exporter worked here) but caused severe issues on the prod environment after policy was pushed (have case open but no proper RC yet). Had to roll back. Speculate trying another higher HF? = very unlikely!!! . Maybe move away from CP? = looks like an option.
Error: Argument [export-attachment-ids] is undefined for command: [add]
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Log Exporter runs on a log server, and yes can be run on the same system as SmartEvent.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello PhoneBoy,
Just wanted to let you know that I was able to export logs from Eventia server to Splunk. Once the Eventia server was upgraded to R80.40 T119 Log exporter was able to run successfully.
Big thank you my friend.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What "severe issues" were caused by upgrading?
Maybe send me the SR in a PM.
In any case, this looks like a bug in the version you're running that has been fixed in a later JHF, according to what you're saying.
The only other option would be to ask TAC to backport the relevant fix to the release you're on (not sure what fix that would be).
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
PhoneBoy,
Thank you for the prompt response. I will send you the TAC case separately for the prod issue. Will ask TAC if we can get a log exporter running without going through an upgrade-don't have a case for this-since I wanted to find out if our general public know about this error and tried something that worked.
We also have a SmartEvent server at 80.40 T29 which also serves as a log server for the same environment. Can log exporter work on a SmartEvent/Reporter? We would be able to upgrade it since no policy pushes required.
Cheers!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Log Exporter runs on a log server, and yes can be run on the same system as SmartEvent.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello PhoneBoy,
Just wanted to let you know that I was able to export logs from Eventia server to Splunk. Once the Eventia server was upgraded to R80.40 T119 Log exporter was able to run successfully.
Big thank you my friend.
