000031353 - Archer 5.X - Arcsight integration - Secops 1.1 - Log facility # does not match.

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000031353
Applies ToArcher 5.x
Secops 1.1
Arcsight
IssueIncidents does not come through from Arcsight and the RCF logs shows lot of the following message:
Log-facility-does-not-match
Causethe log facility number was set to default of 23 (which is used in SA integration)
ResolutionChanged the log facility number in felix.properties file to -1 and fixed the issue

Attachments

    Outcomes