Configuring a Log Server to work with both SmartReporter component and an OPSEC LEA server

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk34729
Technical Level
Product	SmartReporter / Eventia Reporter
Version	R77, R77.10, R77.20, R77.30
Date Created	04-Apr-2008
Last Modified	05-Dec-2017

Symptoms

Attempt to create a new log consolidation in SmartReporter GUI fails with:
Failed to get default parameters from server/database
$RTDIR/log_consolidator_engine/log/<IP_Address>/lc_rt.log file shows the following error messages:
[DD MMM HH:MM:SS][LogConsolidator] ### LEA end reason:SIC_FAILURE (SIC problem with the LEA Server) [DD MMM HH:MM:SS][LogConsolidator] Error:failed to get logs information from log server. There are SIC configuration problems [DD MMM HH:MM:SS][LogConsolidator] Check that: 1) The file $FWDIR/conf/fwopsec.conf contains no rows that refer to lea_server. 2) The file $CPDIR/conf/sic_policy.conf was not modified in a way that would block LEA connections from the log consolidator to SmartCenter or Log server. [20 Feb 9:25:08][LogConsolidator] Error: failed to run log_consolidator -L .

Solution

Note: To view this solution you need to Sign In .