Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1984
Views
0
Helpful
2
Replies

Stopped receiving all events in MARS..how to start receiving again?

hotochinm
Level 1
Level 1

‎03-07-2014 10:34 AM

I am not receiving logs from any of my devices anymore. All 700+ devices have no logs for over a month in MARS. I have logged into the console and restarted all services but that did not help, all services are running.  What is the recommended fix here? A reboot? Running verison 4.3.6.

Labels:
0 Helpful
2 Replies 2

hotochinm
Level 1
Level 1

‎03-10-2014 07:17 AM

I went ahead and rebooted the CS-MARS 100 device. I am able to get back into the web interface as well as CLI. I am still not getting events as before . Could the reason for this be because archiving is not configured for this device? Anyone have any ideas?

0 Helpful

hotochinm
Level 1
Level 1
In response to hotochinm

‎03-12-2014 09:52 AM

Do you think this could be related to the hard drives being at capacity here? Would archiving correct this problem? Anyone?

 

 

Preview file
8 KB
0 Helpful
Customers Also Viewed These Support Documents