Log collection error : Server=XXXXXX; Log Type=SecureSyslog

[Saravana17]

Hi All,
Has anyone noticed below alarms on ISE?

Log collection error : Server=XXXXXX; Log Type=SecureSyslog : null
Log collection error : Server=YYYYYY; Log Type=ProcessStatus : null
Log collection error : Server=ZZZZZZ; Log Type=SystemStatus : null
Log collection error : Server=ZZZZZ1; Log Type=HealthCounter : Exception in Store Method Closed Connection

I'm seeing these alarms from multiple PSNs, MNT and ADM nodes. But, If I do failover to secondary MNT node then these are not appearing. Seems something is not functioning as expected on the Primary MNT node. 

I tried to see community post, unfortunately couldn't find anything related to these specific alarms. 

Could you pls anyone share if you had any experience and solution with this. 

Thanks,
Saravana

[MHM Cisco World]

Do you use profill syslog ?

MHM

[Saravana17]

No. 

Thanks,
Saravana.

[Saravana17]

Hi All,
FYI - Interestingly, this alarm stopped after I renewed "Default self-signed server certificate" on all our ISE nodes which are being used for Admin, Portal and Radius DTLS.

I'm not sure if there is any relation but this the only change happened before this alarm disappear. 

Thanks you all!

Regards,
Saravana