KBI 311570 Issue Addressed: Missing Message Text In Archived SYSLOG Messages
Version
Argent Advanced Technology 5.1A-1707-C or below
Date
Friday, 1 September 2017
Summary
When SYSLOG Rules in Argent for Compliance are used to archive SYSLOG messages, if the SYSLOG message contains some unusual format, the description field (column ‘DESCRIPTION_TX1024’) of the archived database record could be empty.
One typical situation is that the message has multiple lines instead of a single line.
In this case, the Engine might not be able to parse the message properly.
Note: Fields other than ‘DESCRIPTION_TX1024’ are saved correctly.
The issue has been addressed in Argent Advanced Technology 5.1A-1707-D
Technical Background
The issue is caused by coding error
Resolution
Upgrade to Argent Advanced Technology 5.1A-1707-D or above