Firepower 8250 Drain of unprocessed events from Connection Events

[CSC011240286]

Hi There

We have the below critical alert from one of our sourcefire devices it comes and goes.

Drain of unprocessed events from Connection Events.

Any ideas would be appreciated.

[yogdhanu]

Hello there,

Check if this older post is related to your problem.

https://supportforums.cisco.com/t5/firesight-system-3d-system/drain-of-unprocessed-events-from-connection-events-appear-on-my/td-p/3002378

[CSC011240286]

Hi Yogdhanu

I take it the below answer from Claudiu Cismaru posted on the forum  is correct?

If the FP module is configured to send the events to FMC, then you could have:

- pretty slow connection between the module and FMC and a high number of generated connection events, which are lagged behind

- hung process on FMC which receive the events. There were some bugs related on this.

What's the sensor and FMC version?