The Sftp log collector agent on Microsoft IIS server reads logs from the webserver to the most recent log and goes back to the oldest logs in a constant loop. so SA is receiving high volume of logs from the server. right now the server is outputting 8000EPS. I have tried to reinstall the agent but its still the same. Please any help is appreciated.
Can you show me the config at .conf file which you have configured at server.
Also check this at the end of .conf file :
dir0.delete_after_read=true
Hi Philip Peter,
I just wanted to check in to see if this issue was ever resolved?
Did you log a technical support case for this in the end or was Mohd's comment able to help you resolve the issue yourself?
Regards
Paul Thornton
Social Engagement Manager
RSA, The Security Division of EMC
Hi Peter,
Because your issue is so urgent, I would highly advise that you How to contact RSA Support by either calling 1-800-995-5095 or sending an email to support@rsa.com and they will be able to assist you as quickly as they can.
Thanks,
Jeff Shurtliff, CISSP
Sr Social Engagement Manager
RSA, The Security Division of EMC