Dear Experts,
I have a qradar deployment with qradar console plus FP, i connected a SPAN port to my FP.
I could see SPAN traffic from the console web UI by filtering for the flow interface that has the SPAN port. However, I cant see any span traffic from the console web ui anymore.
I ssh into the FP, and ran a tcpdump command on the interface receiving the span traffic, and i could see traffic, but not on the console web UI "Network activity" tab.
Restarted the qflow on both console and FP, disabled and re-enabled the span interface on the FP, yet issue persists.
Kindly assist, if you have faced this issue and resolved it.
------------------------------
benlinux
------------------------------