Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Email Alerting stopped

$
0
0

If your diskusage looks anything like the OP then you've most likely got a rule configuration issue.

 

Especially if the Rules Queue or Epic Rules Queue is maxed out like the OP then you have a few things:

 

  1. If you remember the last rule(s) you worked on disable it.
  2. If you don't, you can check for InternalRuleFired or InternalTestRule events to see what is triggering the most.
  3. If the issue's been going on for a while you can restart the manager service and then check step 2 to see what rule is running off with the LEM.

 

If you need any help with these steps Support will be able to assist you. Most likely it's a rule configuration/correlation causing the rule to fire too frequently and fill up the Queue.


Viewing all articles
Browse latest Browse all 5385

Trending Articles