SpanVA syslog datasource files are larger than the original file uploaded

Products

• CASB Gateway Advanced
• CASB Advanced Threat Protection
• CASB Audit
• CASB Gateway
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS

Issue/Introduction

Datasource details found in CloudSOC, Audit, Device logs report the files that are uploaded and processed is much larger than the original file sent to the SpanVA.

Resolution

This issue was caused by duplicate entries in the SpanVA syslog.conf.

Broadcom is planning to address this issue in the next SpanVA version (post 1.15.3.160) subject to change. 

Compare the file size in the datasource details compared to the file in the source file system. To address this issue with the current version, please contact support to check the configuration files.