Classification: Application

Category: Network service problem

Context: FireMon Data Collector

Context: Warning

Summary

The FireMon Data Collector listens on the 514 UDP port in most cases, however certain correct configurations can cause the Data Collector not to listen on this port.

Description

The FireMon Data Collector listens on the 514 UDP port if at least one UDP syslog device exists. This message appears if the Data Collector is not currently able to accept syslog messages from the network.

Impact

• Syslog messages sent to this machine will not be received and processed by the Data Collector

Cause

• No syslog UDP devices exist

• The Data Collector is misconfigured

• The Data Collector is not running

• The FMOS machine is not healthy (e.g. low disk space, out of memory)

Resolution

• Ensure the FMOS machine is in a healthy state

• Check to ensure at least one UDP syslog device exists

• Apply configuration policy via the fmos redeploy command

• If the above steps do not fix the problem, contact FireMon support

• This check is safe to disable if syslog monitoring it not being used