When a Change Auditor Coordinator is upgraded from a prior Change Auditor version to 7.0, the Event Subscription may not be able to connect to the SIEM software (Splunk, QRadar, ArcSight). The following status is displayed by the Event Subscription:
"LastEventResponse { statusCode = NotFound }"
The following is recorded in the Change Auditor Coordinator log:
"[WARN][Quest.ChangeAuditor.WebServices.ManagedEventWebhookSubscription.SendEvents(0)] AggregateException attempting to send event notification, retry in 300 seconds."
Exception:
"System.AggregateException: One or more errors occurred. ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 127.0.0.1:9000"
WORKAROUND
STATUS:
Waiting for fix in a future release of Change Auditor.
© ALL RIGHTS RESERVED. Feedback Nutzungsbedingungen Datenschutz Cookie Preference Center