Collector is running but not collecting events
3 years ago
Originally Published: 2007-09-12
Article Number
000053808
Applies To
RSA Event Explorer

socket call failed
Issue
Collector is running, but not collecting events
Resolution
In the Event Viewer logs for the collector service, the following error appears:

Socket Call Failed

This indicates that there is another application on the LC listening on port 514, or that there are extraneous folders and files in the %_ENVISION%\tmp folder. Look for other applications that could be using that port, and the only folder that should be in the %_ENVISION%\tmp directory is nuggets, the others can be removed.