Everytime there is an entry in the Syslog server it doubles it on the Web Access page. Does anyone know how to fix this?
Hello gibsond4136,
It sounds like you might have the Log to Kiwi Web Access Action entered twice. Check all of your Rules and make sure this is not the case.
Let me know if this helps or not.
Sincerely,
Chris Foley - SolarWinds - Support SpecialistSupport:866.530.8040 || Fax:512.857.0125network management simplified | solarwinds.com
I am having the same problem. Brand new install of Kiwi on a Win2008R2(64bit) server. Server CPU is at less than 10%. Nothing else running on the box. Zero setting have been modified from the install. We have a custom app sending SYSLOG and a checkpoint firewall. Both are getting dupes. I pointed both a SPLUNK server and no dupes on SPLUNK. We really want to use KIWI but need to get the duplication issue resolved.
Can you double check your rules and actions to make sure you don't have the same rule setup twice in the Setting section of the win32 Syslog viewer app.
I am having the same problem. Everything double in web access but normal when I go directly to Kiwi syslog. I seem to have occured when the web access failed to install correctly the first time. Any idea how to fix this?
Mike
Check out this KB on Duplicate Flows.