Connector Filters Not Updating When Modified
I'm seeing some inconsistent behavior with our connector filters. When we update the filter in the ESM, the changes don't seem to be applying to the connectors as they should. To make sure the changes are (or are not) making it to the connectors, I am greping out the XML files in the connector's agent directory but do not see the updates in the zonebasedfiltering section. When I remove the filter from the connector, the filter-out options do get removed from the XML file but when I re-associate the filter to the connector, the old settings show up, not the new ones. This seems to affect all connectors, not just a select few.
However, when I restart the ESM services, the updates are pushed out but then seem to get "stuck" again after an undetermined amount of time.
Is there a filter cache that needs to be rebuilt, such as the caches for the data monitors and rules? The old settings seemed to be saved somewhere but I don't know how this works on the backend.
Any thoughts on this one?
If it helps, we are using 6.9.1c (no patches installed).
Thanks for your help!