CW2000 security monitor 'intercepting' syslog messages from RME syslog

[srue]

i have RME and VMS security monitor installed on same server. I have all my devices sending snmp traps and syslog messages to this server. In security monitor, i only have two devices configured (my IPS units), however my PIX syslogs are showing up in security monitor, instead of making it to the RME syslog.. whats going on??? (i'm a bit of a cisco works newbie, but otherwise know what i'm doing).

TIA

[b.hsu]

I think the source of your problem will bring you to endless issue in RME since huge number of syslog messages will be coming from your PIX boxes. PIX can dump too many messages which is known to cause database corruption when there are too many entries need to be inserted to the RME database. Reinitialize RME database will help for the mean time, however, the problem will come back again once the messages start to come in. That would mean that you have to keep loosing your RME data again and again. So its better to let Security monitor to receive the syslog messages from PIX.