Environment
NetIQ Sentinel 7.x Connector
NetIQ Sentinel 7.x Sentinel Control Center ESM console
NetIQ Sentinel 7.x Sentinel Control Center ESM console
Situation
The Sentinel Technical Support team often requests a connector raw data dump so that the data can be analyzed. This raw data will allow Support to run the data through the lab and attempt to reproduce the issue. Furthermore, development will need to see the raw data in order to resolve any parsing issues or confirm if the event source is using a supported format. This video gives step by step instructions on how to collect and add the raw data to a file which can subsequently be sent to the Technical Support team.
Resolution
Here is the link for the video:
How to collect a Sentinel connector raw data dump
https://youtu.be/iQXwDhxo910
Cause
Technical support has requested a raw data dump