Maximum sensor devices monitored

Explanation

The system contains a limit to the number of log sources that can be queued for automatic discovery by traffic analysis. If the maximum number of log sources in the queue is reached, then new log sources cannot be added.

Events for the log source are categorized as SIM Generic and labeled as Unknown Event Log.

User response

Select one of the following options:

• Review SIM Generic log sources on the Log Activity tab to determine the appliance type from the event payload.
• Ensure that automatic updates can download the latest DSM updates to properly identify and parse log source events.
• Verify whether the log source is officially supported.

  If your appliance is supported, manually create a log source for the events that were not automatically discovered.

• If your appliance is not officially supported, create a universal DSM to identify and categorize your events.
• Wait for the device to provide 1,000 events.

  If the system cannot auto discover the log source after 1,000 events, it is removed from the traffic analysis queue. Space becomes available for another log source to be automatically discovered.