IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Carbon Black HowTo - Carbon Black Syslog Integration

Carbon Black HowTo - Carbon Black Syslog Integration

This document explains the Carbon Black and Syslog integration procedures.

Labels (1)
Attachments
Comments

We have had our Response server sending data to our Arcsite server for years. Recently the other team indicates the feed has stopped.

I checked and there doesn't seem to be any errors and the /var/log/cb/notifications directory is populated with up to date files with no errors.

What commands or logs can I look in to see if the data is actually being sent or attempting to be sent from my master server.

Article Information
Author:
Creation Date:
‎03-12-2015
Views:
2187
Contributors