RSA Admin

Cisco LMS - \rme\archive\file.xml - does it ever change?

Discussion created by RSA Admin Employee on Jun 3, 2011
Latest reply on Jun 10, 2011 by RSA Admin

We've configured our Cisco LMS 4.0 in enVision and are collecting switch and router logs via the 'syslog.log' file and NIC SFTP agent/Filereader setup.  The configuration also includes a file in the LMS \files\rme\archive\ directory which is created by running a VBScript included in the setup doc.

 

When we set the integration up the file was created, "2011-05-13-05-19-57-changeaudit.xml", but it hasn't changed since. What should we expect to see in the file?  Is the same file used for any changes going forward, or will a new file be generated periodically?

 

Due to another issue we had to modify our sftpagent.conf to specifically monitor that file (instead of the directory\*.xml), so if a new file is created at some point it's going to break our collection.

 

Outcomes