Video Screencast Help

SSIM 4.8 CISCO IOS Event Agent Sensor Status

Created: 22 Oct 2013 | 1 comment
OmerCh's picture

The CISCO event Agent sensor is showing different behaviours,

- From event agent visualizer and table view sensor is down

- From Web GUI agent configuration pannel, sensor is up

There are no event

Sensor was working fine, receiving event and concluding them a few days back

We have enabled Generic syslog collector, created new agent configuration and enabled Linux OS collecotr in these days.

Anyone has an idea what is conflicting with this one.

Disabling all newly created collecotrs/sensors did not help

 

Operating Systems:

Comments 1 CommentJump to latest comment

Laszlo2's picture

Hi,

First of all, which version do you use?

In 4.7.X check the Syslog Director Configuration, ensure that Generic Syslog pattern is after the Cisco pattern in the signature order.

At 4.8 you have to check the agent configuration where the collectors run and ensure the signature order.

Regards,

Laszlo