how to upload wmi logs to connector?
we didn't received any logs because of some error instances so the one solution we thought is to upload WMI logs to connector to parse the content of logs, seeking for your help on how to upload logs on connector.
thanks in advance.
Sounds like you are trying tom monitor connector health i.e. whether the connectors are up and sending messages? There are a couple of different packages available here on Protect which you install on ESM to do this, alternatively if you are running 6.8c some of this functionality is built in under '<resource type>/ArcSight Administration/Connectors' and <resource type>/ArcSight Administration/Devices'
Would you please explain a little bit more about your problem? you did not receive logs from windows on WMI port,am i correct?
well there are some solution to solve this problem. first of all tell me the version of windows servers you use,,secondly , do you use firewall in middle?
i am waiting for your responses to go further..
actually we can't received logs because a misconfiguration of connector to logger, as of now the problem was resolved, we can received logs now. but we need to get the previous logs of wmi (october to january) but now we can received logs the moment we resolved the misconfiguration case (feb 10 up to now i received logs).is there any solution to get the previous logs?
Actually, upon checking security and application logs is on servers. I saw some resolution here, i change the the agent.properties into false (agents.windowshoststable.startatend=false) but after restarting the container, i also didn't collect old logs. do i missed some configuration/setup? and how do we know if connector collect logs instead of checking on logger?