Support Tip: [ArcSight Logger] Certificate Issues: Logger OBC issues, Forwarding, ESM, Missing Certs

0 Likes

Summary
This article describes what to be perform when other issue with certificates between Logger and ESM arise

Products
ArcSight Logger

Environment
Appliance or Software above to 7.1 version

One may have seen some cases where the On Board Connector (OBC) breaks due to various reasons but it seems to be related to a bad certificate in the logger web keystore. It is suggested to please verify certificates if one have tried all the other known workarounds for OBC issues. The certificate will present themselves using the localhost 127.0.0.1 IP, Logger IP or Logger Hostname. Please see attached document for examples.

SYMPTOMS
1. Forwarding Stops

2. Certificates page is blank

3. ESM destinations missing

ERROR Signature:

Do a tail -f on the logger_web.log when trying to access the certificate page in the logger UI.

tail -f /opt/arcsight/userdata/logger/logs/logger_web.log

Read Full Support Article here. 


Support Article Reference Number (URL Name)
KM000007948

__________________________________

Elizabeth Knappen
CyberRes Community Manager

If you find this post useful, give it a ‘Like’ or use ‘Verify Answer’

Labels:

Knowledge Docs
Comment List
Anonymous
Related Discussions
Recommended