Occasionally a parser used with SIEM Enterprise Security Manager (ESM) will appear as though it is running, but data is not getting parsed. This may also be accompanied by excessive disk space utilization. KB82019 https://kc.mcafee.com/corporate/index?page=content&id=KB82019 provides information on how to troubleshoot these stuck parsers.
For more resources, visit the McAfee KnowledgeBase http://support.mcafee.com and search for SIEM-related KBs and visit the McAfee SIEM Community https://community.mcafee.com/community/business/siem.
To help you maximize your SIEM deployment, McAfee SNS ProTips deliver troubleshooting, best practices and how-to tips with links in-depth KnowledgeBase resources. To unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center https://sns.snssecure.mcafee.com/content/signup_login/ .