15.2.13. Troubleshooting external indexers

The indexers that run on an external host send log messages into the standard syslog of the external host. These log messages are not visible on PSM. If a problem occurs, check the logs of PSM and the external indexer to find out which component on which host causes the problem. If the problem is on the external indexer host, verify that the required decryption keys are available on the host, then restart the indexer service using the following command.

  • On Red Hat or CentOS 6.5:

    service external-indexer restart
  • On Red Hat or CentOS 7:

    systemctl restart external-indexer.service

If the problem persists, contact the Balabit Support Team. You can increase the log level of the indexer processes from the configuration file.