Cisco Meraki Logs Not Showing in Dashboard

[apixler77]

I have installed UTMStack from ISO, got an agent installed and setup Meraki logs to go to that agent. Verified that logs and being sent to the agent from the FW with a packet capture. Need some help to troubleshoot why they are not showing up in the dashboard.

[Kbayero]

Hi @apixler77. Could you please provide more details about the problem. Did you install the agent on Windows or Linux? Did you activate the Integration Cisco Meraki in the Integrations Panel? Did yoou run the activation port command in the machine where you installed your agent? Did you check port 1470 TCP or 514 UDP is open in your firewall (in the machine where you installed your agent) and listening? Did you check in the Log Explorer Panel, Source Generic, if the logs are there?

[c3s4rfred]

Hi @apixler77 please, logout and login to the web app and tell us if you can see "Cisco Meraki" submenu under Log explorer menu?

[apixler77]

Yes, it is there. Please look at attachment.

[c3s4rfred]

Please, remove the time filter using the red (X) at top left, below "Source" dropdwon list and take a screen capture agein.

[apixler77]

I added this at the end of the discussion. Did not realize that reply came from right there.

[apixler77]

Here is the image without the time filter.

[Kbayero]

@apixler77 could you pls provide agent logs, try to look for some error message in

C:\Program Files\UTMStack\UTMStack Agent\logs\utmstack_agent.log

Also provide log auth proxy error logs, for that you can run the following command in your UTMStack instance:

docker service logs utmstack_log-auth-proxy

[apixler77]

Installed on Virtual Box.

[c3s4rfred]

Can you check if inside /etc/netplan is the file 99-vlan.yaml, and its content is:

[apixler77]

Here you go.

[apixler77]

Here is the Meraki filter without the time filter.

[apixler77]

Any update on this?