Overview
Events are not being collected from some Syslog sources.
Environment
2013
Status
Open
TT/JIRAID
502
How to Identify
- Test with Wireshark is showing that the Syslogs are getting to the GFI EventsManager Server.
- If logs are showing: SyslogCollectorPlugin.dll, QueueMessageForParsing, Message from computer X.X.X.X did not pass black/white list test and will be discarded.
Workaround/Fix Details
None at the moment
Required Actions
Get logs and escalate.