2018-02-24 12:39 PM
Hello All,
We have running with SA version 10.6 and we have integrated SDEE event source with our log collector (virtual log collector). We have verified that everything was working fine but in recent days we are receiving high amount of below error log messages in our log collector,
2018-02-24T11:02:59.0 | ERROR | [ciscoids.CiscoIPS] [processing] [WorkUnit] [processing] An error occurred creating an SDEE connection: failed to parse XML: Error parsing element attribute: offset, 161 | |
2018-02-24T11:02:59.0 | ERROR | [ciscoids.CiscoIPS] [processing] [WorkUnit] [processing failure] sdee:WrkUnit[2] Processing faile |
Still we are receiving events from SDEE event source. Could you please help us to resolve the error message in log collector.
2018-02-25 12:10 PM
Hi Susin,
I have moved this thread to the RSA NetWitness Suite" data-type="space so that you can get an answer to your question.
You can post future questions and discussions directly to that community by clicking on the Ask a Question or Start a Discussion button on the RSA NetWitness Suite" data-type="space page.
Thanks,
Jeff