I have the same issue with HP 2520's adding the Mikrotic connector and the Dell Equallogic connectors.
First: The device you're messing with is actually going to be parsed under the PIX/IOS connector for LEM. CatOS is for legacy devices running the Catalyst Operating System (which even the Catalyst switches don't use anymore)
Second: The LEM makes a "Best Effort" in matching connectors, and configures every possible match. We'd rather you have too many than not enough and miss data! There's only so many ways to format a 1KB line of text, so there's a lot of similarities between different syslog messages.
You should make an effort to clean up the bad connectors, as they can have an impact on memory and CPU usage in the LEM, and there's no reason to have the LEM attempting to parse logs with the wrong formatting.
Ahh; thanks! It did discover the PIX/IOS connector all on its own a little bit later (which just made me even more confused, until I read your reply) so I guess it just needed a bit more logs before it could tell the difference.
Can you tell me where I would go to clean up the 'bad' connectors? Or will it do that automatically when it tells me it found the right one?
Nope, it won't delete them, unfortunately. To clean them up:
- Manage --> Appliances
- Click the gear next to the LEM in the list, pick "Connectors"
- You'll get a list of connectors. Click the gear next to a bad one, pick "Stop"
- Click the gear again, pick "Delete"
- Lather, rinse, repeat
Got it - thanks again!