Unable to save Syslog (Event and Incident Forwarding) settings on SEDR 4.10

Products

• Endpoint Detection and Response

Issue/Introduction

Attempting to save Event and Incident Forwarding (Syslog) settings on Symantec Endpoint Detection and Response (SEDR) 4.10 results in the following error:

Something went wrong, please try again [Unable to get Webhook settings]

Environment

SEDR 4.10

Cause

Internal configuration for heap size and max message size were too small.  Note that this issue has only been observed on limited SEDR 4.10 installations.

Resolution

This issue is resolved in SEDR version 4.12.  Broadcom support recommends customers upgrade to receive this fix along with many other.

If you are unable to update to SEDR 4.12 please open a support case referencing this article for a temporary workaround.