Voltar
-
Título
Disable MARK and Informational Messages in the Agent -
Descrição
The endpoint is receiving MARK and/or information messages such as established connection or closed connection messages from the Syslog-ng Agent for Windows.
-
Causa
By default the Syslog-ng Agent for Windows has the MARK and information messages set to send to the endpoint.
-
Resolução
To disable MARK messages:
- Start by opening the Syslog-ng Agent for Windows configuration .mmc console.
- For Local: Go to "Local Settings" on the left-hand side, and then double click on "Global Settings" on the right-hand side.
- For GPO: Go to the defined GPO container on the left-hand side, and then double click on "Global Settings" on the right-hand side.
- The Global Settings Properties window should be open, please check the circle for "Enable" on the main "Settings" tab page to enable the Global Options.
- Click on the "Mark Mode Options" tab on the top of the window and then check the circle for "Never".
- Click "Apply" and then "OK".
- Close the Syslog-ng Agent for Windows configuration .mmc console and the settings will now be applied.
To disable informational messages being sent to the endpoint:
- Start by opening the Syslog-ng Agent for Windows configuration .mmc console.
- For Local: Go to "Local Settings" on the left-hand side, and then double click on "Global Settings" on the right-hand side.
- For GPO: Go to the defined GPO container on the left-hand side, and then double click on "Global Settings" on the right-hand side.
- The Global Settings Properties window should be open, please check the circle for "Enable" on the main "Settings" tab page to enable the Global Options.
- Click on the "Internal Messages" tab on the top of the window and uncheck the box for "Remote destinations" for the "Info Message".
- If it is desired to log the informational messages locally, check the box for "Application event container" for the "Info Message". This will ensure the informational messages are logged to the Windows application container, however, the endpoint will not receive these messages.
- Click "Apply" and then "OK".
- Close the Syslog-ng Agent for Windows configuration .mmc console and the settings will now be applied.