Login Correlation Services (LCS) is not working on a Security Analytics virtual appliance version 8.2.4.
There is an adlistenerd process but it's not listening on TCP8843 port.
In /var/log/messages, it shows:
/var/log/messages:2021-10-29T09:19:31+02:00 sa adlistenerd: Starting Logon correlation daemon licensed = No
/var/log/messages:2021-10-29T09:19:31+02:00 sa adlistenerd: Solera Logon correlation is not licensed
/var/log/messages:2021-10-29T09:25:59+02:00 sa adlistenerd: shaft is not licensed
Command adlisternerd -L returns:
[[email protected] ~]# adlistenerd -L
Called for only license check, licensed = No
Security Analytics version 8.1.3
Security Analytics version 8.2.1
Security Analytics version 8.2.4
This is a defect in the software and will be resolved in version 8.2.5. If you have any questions, contact technical support.