Syslog-Forwarding: wazuh-csyslogd ERROR date or location not NULL or p is NULL

13 views
Skip to first unread message

MaP

unread,
Oct 9, 2025, 4:38:30 AM (yesterday) Oct 9
to Wazuh | Mailing List
Hello everyone,

I've checked my ossec.log for the first time in a while (I know I should do this more often, but everything was working fine) due to a change.

Now it says:

wazuh-csyslogd: ERROR: date or location not NULL or p is NULL

I saw an entry about this error here in the mailing list, but it doesn't help me.
The following is entered on all of our servers participating in the cluster:

<syslog_output>
<level>10</level>
<server>x.x.x.x</server>
<format>cef</format>
</syslog_output>

On one server, this message arrives with every level 10 alarm that is sent.

But the syslog messages arrive safely on teh destination.

How can I further narrow down the cause of the error?

What does "p is NULL" mean?

Is the transmitted message possibly not in the correct format?

The Message (which receives the Destination Syslogserver) is:

Oct  9 10:26:00 IP.of.our.node CEF: 0|Wazuh Inc.|Wazuh|v4.12.0|61110|Multiple System error events|10|dvc=managername cs1=(agentname) any->EventChannel cs1Label=Location cat=windows,windows_system, msg=systemgruppe: our systemgroup

Thanks for your Help.

regards

MaP





Reply all
Reply to author
Forward
0 new messages