We had setup zSecure Alert to send messages via the QRadar Unix syslog option, but when we changed to using the ArcSight CEF via syslog option, no CKR2104 messages were produced.
Is there a way to put a trace on zSecure Alert to check why the Arcsight is not issue the CKR2104 messages and sending any data ?
------------------------------
Robert Hunt
------------------------------