Forum Discussion

Justin_Lanoue's avatar
4 months ago

LogSource Resource Mapping Confusion

I have a ticket opened but hoping to get a quicker response here. I am using LogSources but since we are an MSP with multiple clients, there seems to be an issue syslog's are being mapped to other c...
  • Justin_Lanoue's avatar
    Justin_Lanoue
    4 months ago

    Yeah I know about that option which is what I was refencing in the opening and that doesn't work.

    I seem to have fixed this issue though with my own experimentation with the below settings.

    This got devices mapping properly with duplicate IP as seen below.

    It went from the wrong core switch to the proper Sophos XG device that shared the same IP.

     

    No clue how this works as if knows the deviceID the log is coming from why even have all this IP mapping shenanigans?