Logger communication to ESM disrupted due to CA update

Issue occurred when I updated the CA for Logger which stopped the SmartConnectors from forwarding to the Logger receivers, this was fixed and are now working, however I have a forwarder to ESM which has stopped working, how do I update ESM keystore to trust Loggers CA to restore comms.

  • 0

    Hello John, 

    Search for the "agent.log & agent.wrapper.log" of your OBC connector and see what's the errors if there are any. For software version of Logger that means "<logger_path>/current/arcsight/connector/current/logs/"

    Connect on ESM and see what the status of the OBC connector register looks like. I still seen as down or up?

    And last think ... if you changed the ESM certificate as well, then you need to bring new certificate on the Logger as well to allow OBC to communicate with your ESM.

    Cheers. 

    Best Regards, 

    Daniel