USG5300 works in transparent mode and uses elog record the firewall log. Elog always can’t receive the firewall log.
After closed the firewall of NIC, problem is solved.
1. Check the firewall configuration, it is correct, eliminate firewall problem.
2. Check elog configuration, it is correct and hasn’t opened log filtering strategy.
3. Obtain packets on the server, firewall has sent the log to elog server.
4. Doubt it is due to installed firewall software or the NIC opened firewall.
We had better not install firewall software on elog server, at the same time, it is suggested to close the NIC’s own firewall.