Multiple auto-identified device entries for the same IP address in TIBCO LogLogic LMI
Article ID: KB0077217
Updated On:
| Products | Versions |
|---|---|
| TIBCO LogLogic Log Management Intelligence | all versions |
Description
On the Log Source Status page you may see multiple entries for devices with the same IP but they will have different “Type” designations.
This is normal due to how LogLogic LMI identifies log sources. Because it can identify specific applications and operating systems there will frequently be multiple log source entries for some hosts. This will typically occur with general servers such as Windows, Linux, and Solaris systems because LMI can identify all of those operating systems independently as well as applications that are installed on top of them. In some cases one of the log source entries will be of type "General Syslog" and can occur with UNIX-based systems. This is normal and occurs because there are some event types that LMI cannot identify; for those that it can identify they will be otherUnix, Linux, Solaris, etc. In general, however, any event log that LMI cannot identify is by default going to be of type "General Syslog."
This is normal due to how LogLogic LMI identifies log sources. Because it can identify specific applications and operating systems there will frequently be multiple log source entries for some hosts. This will typically occur with general servers such as Windows, Linux, and Solaris systems because LMI can identify all of those operating systems independently as well as applications that are installed on top of them. In some cases one of the log source entries will be of type "General Syslog" and can occur with UNIX-based systems. This is normal and occurs because there are some event types that LMI cannot identify; for those that it can identify they will be otherUnix, Linux, Solaris, etc. In general, however, any event log that LMI cannot identify is by default going to be of type "General Syslog."
Issue/Introduction
This article explains what causes multiple device entries to exist for the same IP address in LogLogic LMI.
Feedback
Yes
No
Powered by
