Denied to EnVision syslog requests from 18.104.22.168
My system has gotten seven "denied to enVision" alerts that show address 22.214.171.124, port 58492 is being denied trying to talk syslog 514 to this one collector.
A firewall's generating the denial.
My question is, might 126.96.36.199 be some kind of loopback address? When I run netstat -an on the collector, I don't see this address active.
Hope that helps.