Endpoint Protection

Hi guys,

I'd like some information on how logs are replicated (running 12.1.3) and where in the database the replicated logs are stored.

I have a customer using a third party tool (ArcSight) for monitoring and when viewing logs for Application and Device control they can only see information for the local site in each database.

I've confirmed logs are being replicated both ways and replication is working. Are replicated logs stored somewhere else in the database?

Thanks,

Brent

have you set Replicate logs from the local site to this partner site ?

Hello,

logs are not segregated in the DB by their source (local or remote), if you can't see them, most likely the replication does not properly work.

Thank you for your comment, this was the information I was after. I have some other anomolies occuring with replication so I will address them first and re-visit this.