Device Operation Logs Fail to Be Displayed on the ATIC
Symptom
After you click the System tab and choose Log Management > Device Logs in the navigation tree, you cannot query device operation logs.
Possible cause
- The device is offline or unreachable to the ATIC server.
- The IP address of the device log server (configured with the info-center loghost command) is incorrect.
- Windows Firewall has UDP port 514 of the collector disabled.
Procedure
- Ensure that the device is online and reachable to the collector.
Click the Defense tab, choose Network Settings > Devices in the navigation tree, and check the device status.
indicates that the device is online.
indicates that the device is offline. In this case, run the ping command on the server where the collector resides to check the connectivity between the device and collector. If the device is unreachable to the collector, check whether the routing and switching devices between the device and collector have any fault.
- Ensure that the IP address of the device log server (configured with the info-center loghost command) is correct.
Telnet or STelnet to the device and check whether the IP address configured with the info-center loghost command is the same as the collector IP address. If no, set the two IP addresses to be the same.
- Ensure that Windows Firewall does not have UDP port 514 of the collector disabled.
- Log in to the collector server UI.
- Choose Start > Control Panel. In the window displayed, click Windows Firewall and choose Turn Windows Firewall on or off. Check whether each network firewall has been enabled. If the firewall is not enabled, UDP port 514 is not disabled.
- If the firewall is enabled, check whether an exception has been added for UDP port 514. In the Windows Firewall window, choose Advanced settings. In the Windows Firewall with Advanced Security window, choose Inbound Rules to browse the list of inbound rules for whether the UDP 514 rule that allows UDP traffic to pass through the firewall exists.
- If no, create a rule that allows UDP packets to pass through the firewall.