Error while sending events from Critical System Protection (CSP) to Syslog server

Products

• Critical System Protection

Issue/Introduction

The Critical System Protection (CSP) Manager is configured to forward event data to a Syslog server.

The Syslog server is reachable from CSP Manager, the connection test passes but CSP events never arrive at the destination. All other applications are successfully submitting logs.

Environment

CSP Manager version 8.0.2.67

Cause

This is a known issue with CSP build 8.0.2.67 caused by a very high event number (max event ID).

Following error can be seen in sis-server.x.log: "Syslog Error: Error while getting max event ID"

 

Resolution

The CSP Engineering team has provided a fix for this issue, which will be merged in future CSP builds.

Please contact Broadcom Support to obtain the fix if required.