2018-05-16 12:07 PM
A few of my ESX servers are reporting the following error: "Cannot login rsa@logserver ip address" . The majority of the ESX servers are not reporting the issue.
2018-05-16 04:02 PM
Rich,
You'll need to go into the Netwitness UI and click down into the log collector's configuration page like this one here.This shows the VMWare collections. See under Sources the two ESX servers. If you click on one and then the Edit button you'll see the next screen shot.
Under the Username and password this is what you have to make sure is correct for the ESX it is trying to pull logs from.
2018-05-16 04:06 PM
Rich,
Here is the community document for setting up VMware ESX sources for log collection which might help with this discussion. https://community.rsa.com/docs/DOC-40292
2018-05-16 05:38 PM
I found the login configuration. They are all using "rsa" as the user.
2018-05-16 05:41 PM
rsa user was locked out in AD. I will monitor the errors and get back to
you...
Thanks for your help.
Rich
2018-05-17 10:14 AM
Rich,
Glad I could help.