EM
Looks like reciever is down
Size: a a a
2021 May 01
MH
siemserver-receiver.service loaded active running SIEM Server receiver
EM
Hm...
EM
Siem can't process incoming messages
EM
Try to deploy siem content in PTKB
EM
Also check address of core rmq in siem.conf
MH
What is the path for Siem.conf file?
m
/opt/mpxsiem/etc/siem.conf
EM
Also check disk free space on siem server
EM
> 30 Gb
MH
yes we have more
EM
Ok. Now check core rmq address in siem.conf
MH
checked it correct
EM
EM
deeper investigation:
- check consumers in this queue
- check consumers in this queue
EM
- try to redeploy siem content in PTKB
MH
We did will try again
EM
For some reason siem reciever can't get messages from core rmq
EM
Show me consumers, please
MH
