Overview

Events are not being collected from some Syslog sources.

Environment 

2013

Status

Open

TT/JIRAID

502

How to Identify

• Test with Wireshark is showing that the Syslogs are getting to the GFI EventsManager Server.
• If logs are showing: SyslogCollectorPlugin.dll, QueueMessageForParsing, Message from computer X.X.X.X did not pass black/white list test and will be discarded.

Workaround/Fix Details

None at the moment

Required Actions

Get logs and escalate.