Classification: Application
Category: Network service problem
Context: FireMon Data Collector
Context: Warning
Summary
The FireMon Data Collector listens on the 514 UDP port in most cases, however certain correct configurations can cause the Data Collector not to listen on this port.
Description
The FireMon Data Collector listens on the 514 UDP port if at least one UDP syslog device exists. This message appears if the Data Collector is not currently able to accept syslog messages from the network.
Impact
-
Syslog messages sent to this machine will not be received and processed by the Data Collector
Cause
-
No syslog UDP devices exist
-
The Data Collector is misconfigured
-
The Data Collector is not running
-
The FMOS machine is not healthy (e.g. low disk space, out of memory)
Resolution
-
Ensure the FMOS machine is in a healthy state
-
Check to ensure at least one UDP syslog device exists
-
Apply configuration policy via the fmos redeploy command
-
If the above steps do not fix the problem, contact FireMon support
-
This check is safe to disable if syslog monitoring it not being used
Comments
0 comments
Article is closed for comments.