Error: "Push failed with error: 256 for IP" encountered when propagating Check Point log sources to downstream TIBCO LogLogic LMI appliance

Error: "Push failed with error: 256 for IP" encountered when propagating Check Point log sources to downstream TIBCO LogLogic LMI appliance

book

Article ID: KB0077269

calendar_today

Updated On:

Products Versions
TIBCO LogLogic Log Management Intelligence all versions

Description

This error occurs when using the Propagate Server Definition - Downstream button under Administration->Check Point Devices on an LMI appliance.

Resolution

To resolve this problem you must execute following procedure on the LMI appliances:

1. Delete the routing rule in the upstream device used to forward the Check Point data by going to Administration->Message Routing, select the rule and remove it.
2. Delete the rule in the downstream device by going to Administration->Message Routing->Upstream Device tab and remove the rule.
3. Recreate the rule in the upstream device by selecting All Devices and temporarily using UDP syslog.  Ensure that auto-discovery is on (Administration->System Settings), on the downstream device.
4. Go to Administration->Check Point Devices->LEA servers tab and click on the Propagate Server Definition - Downstream button.
5. Check that the Check Point devices have been propagated to the downstream device, and wait for about 10 minutes depending on the amount of devices you have on your network.
6. Change the rule back to how it was originally configured (for example: LogLogic TCP, with authentication and encryption).

Issue/Introduction

This article describes how to resolve the following error message: "Push failed with error: 256 for IP".