New device types deployed but not shown
1. I've introduced new *nix machines to envision
2. created and validated a parser
3. created package and deployed (using the VBS file)
4. restarted nic service manager
following the above steps, all messages that should have been parsed (should have because the ESI confirmed all messages parsed correctly) are still going to "unknown" under analysis ->message view -> device type.
however, under Overview -> sys configuration ->devices -> Manage device types the new device name apears (with 0 monitored devices).
running "uds -parse -device *DeviceName* -error -msg -verbose > path_to_log.txt" showing some old logs that are related to other device type.
other than that i see not errors in any logs file that could indicate why the device types are not being shown/created ..
What 'nix flavor is it? RSA supports syslog, so I'm not sure why you needed to create a new parser for it. In any event, you may need to go into Managed Monitored Devices and change the device type from "Unknown" to the new device type.
The parser is for the logs generated by the application on the linux machine
But i think i already realized that the issue is with the header id not set properly and the messages are being parsed by another component parser and some are not being parsed at all.