000031353 - Archer 5.X - Arcsight integration - Secops 1.1 - Log facility # does not match.

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000031353
Applies ToArcher 5.x
Secops 1.1
IssueIncidents does not come through from Arcsight and the RCF logs shows lot of the following message:
Causethe log facility number was set to default of 23 (which is used in SA integration)
ResolutionChanged the log facility number in felix.properties file to -1 and fixed the issue