This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Identify when the iView server stops ingesting/processing the logs

Hi,

I have 106 devices reporting to my iView server, and occasionally when I check the live logs I find that it reporting the current logs from any device. The syslog traffic is definitely still coming into the server, as I can packet sniff it on the interface, its just not showing up in the UI.

Any ideas/suggestions on how I can be notified when this happens, more importantly on how I can identify the issue and resolve this happening again. Currently on a reboot of the iView server resolves it, then I lose the data from the intervening time period.

iView server SIVOS 03.01.1

Thanks,

Nigel

This thread was automatically locked due to age.

Parents

0 sachingurung over 6 years ago

Hi Nigel,

It could be a Memory or High CPU issue. How much Memory and CPU usage do you see in the System Dashboard section of iView when it stops reporting?

Thanks,

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 sachingurung over 6 years ago

Hi Nigel,

It could be a Memory or High CPU issue. How much Memory and CPU usage do you see in the System Dashboard section of iView when it stops reporting?

Thanks,

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data