Reviewing Blumira System logs to troubleshoot errors

Replacing a connector that is disconnected

Failed Cloud Connectors that cannot send logs to Blumira will show an error summary in the Cloud Connector page when a connection is lost, but more detailed information is available in the logs in Report Builder. 

Recommended: If your Cloud Connector is experiencing errors, the fastest way to start logging again is usually to delete the broken connector and then add a new connector for the integration. This will prevent additional error notifications from being sent. Blumira retains the already collected logs from the failing connector for the data retention period included in your license.

The Cloud Connector integration articles provide known requirements and tips for configuring, so consider those when adding a new connector. 

You may also want to review these troubleshooting tips for common errors users experience when setting up these integrations:

• Microsoft 365
• Mimecast
• Carbon Black Cloud Endpoint Standard

Viewing system logs

To see the full error messages from your Cloud Connector system logs, you can run a report by doing the following:

1. In Blumira, navigate to Reporting > Report Builder. 
2. In Data Sources, select Blumira System.
3. Click Edit Report and then click Add Filter to add filters to narrow the data to the integration that is reporting errors. For example, if your DUO Security connector is in error, use these filters:
   
   • message contains error
   • device_address contains duo
4. Click Submit.
5. Review the message column to see the full error message in each log and use the information or suggestions to resolve the issue causing the failed connection.