Ask the Community
Groups
Troubleshooting Message Handler - Connect IT Community | Kaseya
<main> <article class="userContent"> <p><strong>PROBLEM:</strong></p> <p>How to troubleshoot Message Handler?</p> <p> </p> <p>Syslog messages are not appearing in the Event Manager from any servers. How can you test if the Message Handler is working correctly by generating syslog messages locally?</p> <p> </p> <p><strong>RESOLUTION:</strong></p> <p>Check if Windows Firewall or any other Firewall/AntiVirus application is blocking the syslog messages from reaching Traverse and allow incoming traffic on port 514.</p> <p> </p> <p><strong>Troubleshooting Steps</strong></p> <p>Syslog uses port number <strong>514 </strong></p> <p>Run a netstat command to determine which process ID’s (PID) is listening on port 514</p> <p> </p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/AAGRRM6XR48U/brx7osi7illkiebue2ar9-00iebwxp-tyeh-qdvh44fwnjyqils6n3vloazidjwvqiaegigttwm-phcjydkg-9nhcnx289amoyvv8zzym6b9nkdcqx3vlg15xpaojyimwa." alt="2014-10-22_1026.png" width="624px;" height="321px;" class="embedImage-img importedEmbed-img"></img></p> <p> </p> <p>Open Task Manager to determine the process name which corresponds with the PID</p> <p> </p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/C85D5HY27UTT/1-zxbanbk0k6aax5sa4nrh5tnrxgnf5amzvd7yc4nkbsw4bs9pkkesqtssoyg9vx3sowoqvl3rauqxd6sahsroklq4bhj-3fbfxq-vteepv7fh2fhmsvklyn17qrpkmb8a." alt="2014-10-22_1029.png" width="413px;" height="463px;" class="embedImage-img importedEmbed-img"></img></p> <p> </p> <p>The message handler process listens on port <strong>7693.</strong></p> <p>Run netstat command again to determine if the PID corresponds to the message handler process.</p> <p> </p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/XZVAC4TIMHHD/jy5oe7ribq4tseilfm9dtosaqrnkbktkgu-kwgwb3qdzf6v74xn5wcoia2-djpqjjrnphq4svn19q3oe845ne2zgd-tcf5ewybwnkuyablw9d42icm8zecpf-92ldjcdta." alt="2014-10-22_1036.png" width="624px;" height="318px;" class="embedImage-img importedEmbed-img"></img></p> <p>Use a syslog message generator tool to confirm that the messages are being received.</p> <p>e.g <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fwww.snmpsoft.com%2Ffreetools%2Fsysloggen.html">http://www.snmpsoft.com/freetools/sysloggen.html</a></p> <p><br><br></p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/F8LX16ER7OJ0/uhdrjiaofdjdq98-4c5rjjaw-haom-r6xcsawz42druwjqr9jlhwajrzcrsmrz9dyzkdahxs1s6-ifpdpnbrjc3aw9hrfxfhfwmgl2f4fhcx8tqocqqm6fbvegvttczcoq." alt="2014-10-22_1125_001.png" width="624px;" height="318px;" class="embedImage-img importedEmbed-img"></img></p> <p> </p> <p>Tail the <Traverse Home>\logs\messages.log to see the generated syslog message</p> <p> </p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/2L727ZONGDN3/ukd7j86lqdsts89gi2nrtrln1nsawzketajh-yi7vvphxetcsrmomeqa5kecozehivk6332iwtbakobculzff5purgzt7x2pmth7fuaebsebqccznegxosu-cg3r-omvoq." alt="2014-10-22_1125.png" width="624px;" height="314px;" class="embedImage-img importedEmbed-img"></img></p> <p> </p> <p><strong>APPLIES TO:</strong></p> <p>All versions of Traverse</p> <p><br><br></p> </article> </main>