01-29-2009 11:37 AM
I have an issue with an ASA 5505's syslog data being seen in RME. The data is arriving at the LMS server because the data is seen in the unidentified report. The other unusual symptom is the "Device Alert Identifier" has a red exclamation point after the ID number.... Version is 7.2(2)... I have another ASA 5505 running 8.0.(4) that is configured the same but is working correctly... Please don't tell me its a version issue. Thanks in advance.
Solved! Go to Solution.
01-29-2009 01:15 PM
Good. There is actually another bug filed for this problem, CSCsu88608. THAT bug should be fixed. The problem is once a device is added to the unexpected devices cache, it is not purged once it gets managed by RME. Therefore, SyslogAnalyzer must be manually restarted to purge the cache.
01-29-2009 11:41 AM
If messages are showing up in the unexpected devices report, then RME cannot map the messages to a managed device. How do the messages appear in the syslog message log on the server? How is the device showing up in LMS? Please post a screenshot showing this exclamation mark issue. This sounds like something completely unrelated to the syslog issue.
01-29-2009 11:55 AM
01-29-2009 01:07 PM
Issue Resolved... found the answer in the release notes for RME. CSCSa57752 matched my issue exactly... Restarting the syslog analyzer process fixed the issue...
01-29-2009 01:15 PM
Good. There is actually another bug filed for this problem, CSCsu88608. THAT bug should be fixed. The problem is once a device is added to the unexpected devices cache, it is not purged once it gets managed by RME. Therefore, SyslogAnalyzer must be manually restarted to purge the cache.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide