> Source: [sk180118](https://support.checkpoint.com/results/sk/sk180118)

# sk180118 - The Management Server fails to parse Syslog messages sent by the Security Gateway

| Property | Value |
|----------|-------|
| Solution ID | sk180118 |
| Date Created | 2022-10-17 |
| Last Modified | 2022-10-19 |
| Technical Level | Advanced |
| Products | Security Management Server |
| Versions | R81.10 (EOS), R81 (EOS) |

## Symptoms

- * "*Accept Syslog messages*" is enabled in the Management object in SmartConsole.
* The IP address of the Management Server is configured as a remote logging server in the Security Gateway configuration.
* '*tcpdump* ' on the Management Server shows the syslog traffic arriving from the Security Gateway  

  `[Expert@MGMT:0]# tcpdump -enni any host 172.30.123.32 and port 514`  
  `tcpdump: verbose output suppressed, use -v or -vv for full protocol decode`  
  `listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes`  
  `18:46:37.250422 In 00:50:56:89:70:45 ethertype IPv4 (0x0800), length 118: 172.30.123.32.58876 > 172.30.123.1.`**514** `: `**SYSLOG**`daemon.debug, length: 74`  
  `18:46:37.250540 In 00:50:56:89:70:45 ethertype IPv4 (0x0800), length 157: 172.30.123.32.58876 > 172.30.123.1.`**514** `: `**SYSLOG**`daemon.debug, length: 113`

  <br />

* "*ps aux \|grep syslog*" does not show the "syslog" process running

## Cause

The Syslog process is not running.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content