Overview
Syslog messages from a Citrix device are not shown in the events browser. Other Syslog events from other devices are archived correctly.
Environment
- GFI EventsManager 2012 and GFI EventsManager 2013
- Network appliance sending Syslog messages to the GFI EventsManager Server
Root Cause
When a Syslog message is received from a licensed device that does not match the message format for which the device is configured, the message will be rejected.
Resolution
Ensure that the Citrix device is using the Simple Syslog Message parsing schema to process events. For testing purposes, it may be helpful to choose to archive all messages until it is confirmed that the messages are not being rejected by GFI EventsManager.