AnsweredAssumed Answered

Cannot add log server to smartevent

Question asked by Henning Aga on Feb 17, 2017
Latest reply on Jun 27, 2017 by Dameon Welch Abernathy

We have configured SmartEvent R80.10 (dedicated) and by following sk110894 gotten av few domains and logs into SmartEvent.

(We get the "Correlating logs to events. The log correlation unit is not able to read logs from Log server: . Please run 'cpstat cpsead' " but we see logs and events, so we're assuming this is cosmetic).

 

However, we are _only_ so far able to add logs from domains where the firewall logs to a dedicated log server. If the firewalls in the domain we add log to the management, it does not appear in "General settings -> Inital settings -> Correlation Units -> Add (select domain where firewall logs to managment (not do dedicated log server).

 

Anybody seen anything similar. smartevent_issue.GIF

Outcomes