Issues with Event Source Monitoring

[RSAAdmin]

Running 10.4.0.1

Is anyone seeing this issue where Event Source Monitoring is not logging/alerting and does not display content from the 'Event Source Monitoring' tab:

Been trying to troubleshoot this for weeks (with RSA Support too):

[Anonymous]

yep i have seen that in my lab devices.

I haven't tried to fix it, I just use the rest output.

http://logdecoderIP:50102/decoder?msg=logStats&force-content-type=text/plain&expiry=600

[RSAAdmin · Accepted solution]

Applied the 10.4.0.2 patches and seems to have fixed me issue.

Make sure to backup your /etc directories before updating.

[SamueleColnaghi]

Hello,

can you try with this command?

service collectd stop

service collectd start

Let me know

sam

[RSAAdmin]

Looks like this issue has come back again......