cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

FirePower- Event Backlog

tsiemers1
Spotlight
Spotlight

Updated to version 6.1.0.1-53 and getting "Event Backlog errors".  

Every so often it will pull up a health alert saying:

"Event backlog has been increasing for 62 Mins. 30 Secs. Current backlog is 1800308383.0mb"

We are sending event logs to a external ELK stack which I am thinking is what the backlog is.  How can I find more information on what exactly the backlog is and where I can clear it.

Who Me Too'd this topic