Datasource details found in CloudSOC, Audit, Device logs report the files that are uploaded and processed is much larger than the original file sent to the SpanVA.
This issue was caused by duplicate entries in the SpanVA syslog.conf
.
Broadcom is planning to address this issue in the next SpanVA version (post 1.15.3.160) subject to change.
Compare the file size in the datasource details compared to the file in the source file system. To address this issue with the current version, please contact support to check the configuration files.