Since I made the Docker Network change in TestNet, Qradar is no longer getting syslogs. I thought you mentioned to me something about syslogs when we were doing the changes. Production is working fine though.
Release : 4.1.0
While modifying the docker networking setting an invalid address was entered in the configuration. Subsequently, this was corrected but several settings in the PAM database were inadvertently modified. This caused 2 of the internal docker containers to fail to restart after rebooting the node.
This needs to be corrected in the PAM database directly by a Broadcom Support engineer over ssh as this will not auto correct.