Category: Network service problem
Context: FireMon Data Collector
The FireMon Data Collector listens on the 514 UDP port in most cases, however certain correct configurations can cause the Data Collector not to listen on this port.
The FireMon Data Collector listens on the 514 UDP port if at least one UDP syslog device exists. This message appears if the Data Collector is not currently able to accept syslog messages from the network.
Syslog messages sent to this machine will not be received and processed by the Data Collector
No syslog UDP devices exist
The Data Collector is misconfigured
The Data Collector is not running
The FMOS machine is not healthy (e.g. low disk space, out of memory)
Ensure the FMOS machine is in a healthy state
Check to ensure at least one UDP syslog device exists
Apply configuration policy via the fmos redeploy command
If the above steps do not fix the problem, contact FireMon support
This check is safe to disable if syslog monitoring it not being used