Hello, There may be some other issues here, but looking at the log files
rabbit isn't started. If you start rabbit (service rabbitmq-server
start) does it stay started?
There is some bad syslog content, and we are working to fix as many
hosts as we can as rapidly as possible. Most of the content flagged as
bad is still being parsed correctly however, so from a resource
perspective a resolution is pretty low on our p...
I had the same issue. There are two routes to take here. The first is to
follow the RSA guide on rotating the logs to ensure they are compressed
after they hit 300MB: 000032301 - The messages file fills up the
/var/log partition and prevents services...
Hi Jeremy, Using the process here I was able to shovel syslog from a VLC
to a 3rd party destination:
https://community.rsa.com/community/products/netwitness/blog/2016/09/23/how-to-forward-syslog-from-a-remote-log-collector-to-another-destination
It w...
I followed your directions and was able to set this up on all my VLCs to
forward traffic to a 3rd party platform. It took a bit of tweaking to
get it working as I liked, what I found worked best was using the
following forwarding rules, sending TCP t...
