Preface
This post will help you troubleshoot and resolve connectivity issues between your SkyFormation
app to a SIEM configured in it.
Typical root causes and recommended remediation action
Connectivity root cause | Recommended remediation action |
---|---|
Firewall between the SkyFormation app to the SIEM blocks the syslog events | Ask the network admin to see if drop events from SkyFormation app appears at the Firewall audit logs.If so ask the Firewall admin to allow such communication traffic. |
The SIEM settings configured in the SkyFormation app are not aligned with the SIEM collectors/listeners settings expected. For example SkyFormation SIEM settings configured to use syslog with TCP and the SIEM expect syslog events to come in UDP | Ask the SIEM admin to verify the SIEM settings used in SkyFormation matches the SIEM settings expected |
Done
Comments
0 comments
Please sign in to leave a comment.