VLC discovered as LC

[ShishirKumar1]

Hi All,

I am facing a strange issue. I have deployed the VLC from the 'SA-RemoteLogCollector-SW_v10.6.0.0_OVF10.ova' file and after adding the VLC, it has been discovered as a Local collector though it was supposed to be a Virtual collector.

I cannot find the syslog config anywhere on the collector and cannot connect it to another Local collector. Can you please advise on how to change it to the correct service tyoe?

[AhmedTarek · Accepted solution]

Hello Shishir,

Please try this,

1. Stop nwlogcollector on VLC:

         stop nwlogcollector

      2. Run the following command (Note: DO NOT USE vi or echo to write in to the file as it will create an extra line which will invalidate the file):

         printf RC > /etc/netwitness/ng/logcollection/logCollectionType

      3. Start nwlogcollector

         start nwlogcollector

[ShishirKumar1]

Thanks a lot. Helped immediately.