FwA 4 stops accepting syslogs (shows No Data)
Hi
We recently purchased FwA4 Professional with 30 licenses. Currently we have 12 Cisco Pix firewalls sending logs to it. It receives these logs fine for a day or so and then stops displaying data as it is received.
I can see that syslogs are still hiting the server (Redhat Linux - by the way), but it appears it is no longer accepted into the FwA software.
Any way I can further troubleshoot this?
I do a netstat -l which shows syslog port as listening and traffic hits the queue.
The diskspace is still fine (only using 5% of a 650Gig partition).
The "packet count" link on the GUI also shows that syslogs are flowing. Approximately 2000 packets per second.
Any way to check if the syslogs are entering the database?
Any other ideas welcome!
Thanx
Frank
New to ADSelfService Plus?