Symptoms

• The Device and Domain fields of a transaction show “Unknown” instead of the correct value.
  
  

  Open

  

Cause

DPOD displays a device or a domain as "Unknown" when it gets Syslog records from the gateway that contain metadata which does not match that gateway or domain configuration in DPOD.

This might be caused by:

1. Reinstalling DPOD

2. Adding a new monitored device or domain

3. An issue in DPOD's agents

4. Exporting and importing DataPower domains (including their log targets configuration) between gateways

Resolution

1. If you reinstalled DPOD, make sure to add all the gateways that were previously configured in DPOD.

2. Go to Manage → Devices → Gateways, click the gateway and under the “Setup” tab click “Setup Syslog for Device” and “Setup Syslog for all domains”. After Syslog Setup is complete, the correct device and domain names will appear in a few minutes.

3. When adding a new monitored device or domain - wait for 1-2 minutes for DPOD to cache and show the new name.

4. To detect an issue is DPOD's agents, Check System Status Using the Web Console. You may need to restart the agents using Admin Console.

5. To identify which gateways are sending Syslog records to DPOD, you may use the following command in DPOD server:

   netstat -nap | grep ":600[0-9][0-9]"

   Make sure all IP addresses belong to gateways that are configured properly in DPOD.