I have an issue with an ASA 5505's syslog data being seen in RME. The data is arriving at the LMS server because the data is seen in the unidentified report. The other unusual symptom is the "Device Alert Identifier" has a red exclamation point after the ID number.... Version is 7.2(2)... I have another ASA 5505 running 8.0.(4) that is configured the same but is working correctly... Please don't tell me its a version issue. Thanks in advance.
Good. There is actually another bug filed for this problem, CSCsu88608. THAT bug should be fixed. The problem is once a device is added to the unexpected devices cache, it is not purged once it gets managed by RME. Therefore, SyslogAnalyzer must be manually restarted to purge the cache.