KBI 311570 Issue Addressed: Missing Message Text In Archived SYSLOG Messages

Version

Argent Advanced Technology 5.1A-1707-C or below

Date

Friday, 1 September 2017

Summary

When SYSLOG Rules in Argent for Compliance are used to archive SYSLOG messages, if the SYSLOG message contains some unusual format, the description field (column ‘DESCRIPTION_TX1024’) of the archived database record could be empty.

One typical situation is that the message has multiple lines instead of a single line.

In this case, the Engine might not be able to parse the message properly.

Note: Fields other than ‘DESCRIPTION_TX1024’ are saved correctly.

The issue has been addressed in Argent Advanced Technology 5.1A-1707-D

Technical Background

The issue is caused by coding error

Resolution

Upgrade to Argent Advanced Technology 5.1A-1707-D or above