Action Log Viewer Data is Not Posted to Log 360 EventLog Analyzer

Problem

After configuring the integration, you may encounter an issue where the details in the Action Log Viewer are not being reflected in Log 360 EventLog Analyzer. This discrepancy in data posting can be attributed to one or more of the following problems:

Causes

• Connectivity: The data from Action Log Viewer fails to be posted to Log 360 EventLog Analyzer due to connectivity issues between the two systems.
• Invalid API Key: The API key provided during the integration setup may no longer be valid or may have expired, causing the data posting process to fail.
• Device is disabled in the log source.
• Application is disabled in the log source.

Action Log Viewer data is scheduled to be posted to Log 360 EventLog Analyzer at regular intervals. However, if the data is not being posted, it indicates the existence of one or more of the above-mentioned problems.

Resolution

To resolve the issue of Action Log Viewer data not being posted to Log 360 EventLog Analyzer, follow the steps below based on the specific cause:

1. For Connectivity Issues

Review the connectivity settings between Action Log Viewer and Log 360 EventLog Analyzer. Ensure that both systems can communicate with each other over the network. Check for any network restrictions or firewalls that might be impeding data transfer and address them accordingly. To know more about resolving connectivity errors of this integration, click here.

2. Invalid API Key

If the API key used for integration is no longer valid or has expired, you need to generate a new AuthToken and update it in Endpoint Central. Follow these steps to perform this task:

• Log in to Log 360 EventLog Analyzer.
• Navigate to Settings.
• Click on API Settings.
• Choose "Create New AuthToken."
• Select "http_listen" as the Scope for the AuthToken.

  

• Choose the expiration for the AuthToken.
• Click "Create" to generate the AuthToken, and then use it in the integration settings for Endpoint Central.

3. Device is Disabled in Log Source

If the device associated with the Endpoint Central log source is disabled or deleted in Log 360 EventLog Analyzer, follow these steps to enable it again:

• Log in to Log 360 EventLog Analyzer.
• Go to Settings.
• Click on Devices.
• Search for devices with the Endpoint Central hostname and enable them.

4. Application is Disabled in Log Source

If the application linked to the Endpoint Central log source is disabled or deleted in Log 360 EventLog Analyzer, follow these steps to enable it again:

• Log in to Log 360 EventLog Analyzer.
• Go to Settings.
• Click on Applications.
• Click on ME Applications.
• Enable the UEM product management application.

If you have followed the above steps and are still experiencing issues with data posting, please don't hesitate to contact our support team for further assistance.