Troubleshooting
Problem
A problem can arise with remotelog configuration where the syslog is no longer sent to the SIEM server.
Some symptomatic errors or notifications may appear in the logs or Guardium UI to help diagnose this.
Symptom
One symptom of this issue is a message on the "Deployment Health Dashboard" of you Central Manager.
The message reads "Issue with rsyslog facility" and the fully qualified domain name of the affected appliance and timestamp are listed.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z0000001erwAAA","label":"SIEM"},{"code":"a8m3p000000PCUdAAO","label":"SIEM-\u003ESyslog Forwarding"}],"ARM Case Number":"TS015440049","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Historical Number
TS015440049
Was this topic helpful?
Document Information
Modified date:
21 March 2024
UID
ibm17144947