Configuring a Log Server to work with both SmartReporter component and an OPSEC LEA server
||SmartReporter / Eventia Reporter
||R77, R77.10, R77.20, R77.30
Attempt to create a new log consolidation in SmartReporter GUI fails with:
Failed to get default parameters from server/database
$RTDIR/log_consolidator_engine/log/<IP_Address>/lc_rt.log file shows the following error messages:
[DD MMM HH:MM:SS][LogConsolidator] ### LEA end reason:SIC_FAILURE (SIC problem with the LEA Server)
[DD MMM HH:MM:SS][LogConsolidator] Error:failed to get logs information from log server. There are SIC configuration problems
[DD MMM HH:MM:SS][LogConsolidator] Check that:
1) The file $FWDIR/conf/fwopsec.conf contains no rows that refer to lea_server.
2) The file $CPDIR/conf/sic_policy.conf was not modified in a way that would block LEA connections from the log consolidator to SmartCenter or Log server.
[20 Feb 9:25:08][LogConsolidator] Error: failed to run log_consolidator -L .
Note: To view this solution you need to