Protocol source configuration incorrect

Explanation

The system detected an incorrect protocol configuration for a log source. Log sources that use protocols to retrieve events from remote sources can generate an initialization error when a configuration problem in the protocol is detected.

User response

Resolve the protocol configuration issues by following these steps:

• Review the log source to ensure that the protocol configuration is correct.

  Verify authentication fields, file paths, database names for JDBC, and ensure that the system can communicate with remote servers. Hover your mouse pointer over a log source to view more error information.

• Review the /var/log/qradar.log file for more information about the protocol configuration error.