Submit a ticketCall us

Looking to compare latest NPM features with previous versions of NPM?
The NPM new feature summary offers a comparison of new features and improvements offered with this release.

 

Home > Success Center > Log & Event Manager (LEM) > LEM behavior when one device has an agent installed and is sending syslogs

LEM behavior when one device has an agent installed and is sending syslogs

Table of contents
Created by Erica Gill, last modified by MindTouch on Jun 23, 2016

Views: 7 Votes: 0 Revisions: 3

Overview

This article discusses LEM behavior when a device has a LEM agent installed and is also sending syslogs to the LEM appliance.

Environment

All LEM versions

Detail

When a device has a LEM agent installed and is also sending syslogs to the LEM appliance the expected behavior is that only the LEM agent will show in the Nodes list in the LEM console. 

 

To tell if an event has been collected by the LEM appliance and the syslog connector:

  • The ToolAlias field will show the name of the connector on the appliance which collected and normalized the information. 
  • The InsertionIP will be that of the LEM appliance while the DetectionIP will be that of the device.

 

To tell if an event has been picked up by the agent and connectors configured on the connector:

  • The ToolAlias field will show the name of the connector on the agent which collected and normalized the information. 
  • The InsertionIP will be that of the device and the DetectionIP will be that of the device.

 

Last modified
20:12, 22 Jun 2016

Tags

Classifications

Public