Endpoint Protection

We have symantec 12.1.6 - external logging is enabled . This was working fine until few days back when we found that no logs are

received from SEPM to RLC - Remote log Collector

Is there any troubleshooting we can do to confirm configuration from SEPM is working fine ? Is there any logs in SEPM  we can check ?

I have run through below article https://support.symantec.com/content/unifiedweb/en_US/article.TECH234688.html

however upgrade has happened some months  back and issue appeared only few days back. So I believe this is not related to the

upgrade.

Do you see any DUMP file as per this discussion?

https://www-secure.symantec.com/connect/forums/forwarding-logs-syslog-server

Dump file is empty.

Have you tried a restart of the SEPM services?

SEPM Service & SEPM Server was restarted.

and what is the result?

No Change ..No logs received at RLC .

have you run a pcap to see if logs are even leaving the SEPM?

Yes from SEPM we could see syslog traffic from SEPM server to RLC . But no logs are received at RLC .

What about a pcap from the RLC side?