Very Urgent!!! The Sftp log collector agent on Microsoft IIS server reads logs from the webserver to the most recent log and goes back to the oldest logs in a constant loop. so SA is receiving high volume of logs from the server. right now the server is o

[PhilipPeter]

The Sftp log collector agent on Microsoft IIS server reads logs from the webserver to the most recent log and goes back to the oldest logs in a constant loop. so SA is receiving high volume of logs from the server. right now the server is outputting 8000EPS. I have tried to reinstall the agent but its still the same. Please any help is appreciated.

[jeffshurtliff]

Hi Peter,

Because your issue is so urgent, I would highly advise that you Contact RSA Customer Support by either calling 1-800-995-5095 or sending an email to support@rsa.com and they will be able to assist you as quickly as they can.

Thanks,

Jeff Shurtliff, CISSP

Sr Social Engagement Manager

RSA, The Security Division of EMC

[MohdSaadKhan]

Can you show me the config at .conf file which you have configured at server.

Also check this at the end of .conf file :

dir0.delete_after_read=true

[PaulThornton]

Hi philip peter,

I just wanted to check in to see if this issue was ever resolved?

Did you log a technical support case for this in the end or was Mohd's comment able to help you resolve the issue yourself?

Regards

Paul Thornton

Social Engagement Manager

RSA, The Security Division of EMC