0 Replies Latest reply on Apr 16, 2015 12:14 PM by ravismallah

    Extracting logs using McAfee Agent


      Hi, guys i m facing a weird problem, while pulling the logs from my data source using McAfee agent i have noticed my agent service goes down every time the log rotation happens at the source.

      This result in halting of log forwarding toward the SIEM collector( ERC ). First i tried writing a crone to restart the service but the issue is that there is no specific time at which log rotation happens and thus no specific time the crone should run.