Description

This article explains the procedure to fix if you are unable to add an external syslog IP address in Security Director

Symptoms

You might observe the following error in server.log

 

2025-11-19 12:13:39,110 ERROR [net.juniper.jnap.ecm.logcollector.LogCollectorRequestExecutor] (default task-44) Got ES ServerResponse status code as 400 for URL:http://x.x.x.x:4514/api/juniper/log-collector/forward-target

2025-11-19 12:13:39,110 ERROR [net.juniper.jnap.ecm.logcollector.ejb.LogCollectorManagerBean] (default task-44) Error occured while updating syslog forwarding configuration : UnKnown Error Occured. Please see logs for more details

2025-11-19 12:13:39,113 ERROR [org.jboss.as.ejb3.invocation] (default task-44) WFLYEJB0034: EJB Invocation failed on component jnap.ecm.LogCollectorManagerEJB for method public abstract net.juniper.jnap.ecm.datacollection.mo.SysLogResponse net.juniper.jnap.ecm.logcollector.api.LogCollectorManager.configureSysLogForwarding(net.juniper.jnap.ecm.datacollection.mo.SysLogRequestTo) throws net.juniper.jnap.ecm.exception.ECMException: javax.ejb.EJBException: net.juniper.jnap.ecm.exception.ECMException: net.juniper.jnap.ecm.exception.ECMException: UnKnown Error Occured. Please see logs for more details

    at org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInOurTx(CMTTxInterceptor.java:266) [wildfly-ejb3-22.0.0.Final.jar:22.0.0.Final]

    at org.jboss.as.ejb3.tx.CMTTxInterceptor.requiresNew(CMTTxInterceptor.java:414) [wildfly-ejb3-22.0.0.Final.jar:22.0.0.Final]

    at org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:160) [wildfly-ejb3-22.0.0.Final.jar:22.0.0.Final]

    at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)

    at org.jboss.as.ejb3.component.invocationmetrics.WaitTimeInterceptor.processInvocation(WaitTimeInterceptor.java:47) [wildfly-ejb3-22.0.0.Final.jar:22.0.0.Final]

    
    at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)

    at org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInOurTx(CMTTxInterceptor.java:252) [wildfly-ejb3-22.0.0.Final.jar:22.0.0.Final]

    ... 101 more

Caused by: net.juniper.jnap.ecm.exception.ECMException: UnKnown Error Occured. Please see logs for more details

    at net.juniper.jnap.ecm.ECMQueryHelper.getEcmException(ECMQueryHelper.java:343) [ecm-shared.jar:]

    at net.juniper.jnap.ecm.logcollector.LogCollectorRequestExecutor.executeQuery(LogCollectorRequestExecutor.java:460) [ecm-shared.jar:]

    at net.juniper.jnap.ecm.logcollector.LogCollectorRequestExecutor.executeQuery(LogCollectorRequestExecutor.java:308) [ecm-shared.jar:]

    at net.juniper.jnap.ecm.logcollector.util.LogCollectorConfigUtil.sendConfig(LogCollectorConfigUtil.java:124) [log-collector-manager.jar:]

    at net.juniper.jnap.ecm.logcollector.ejb.LogCollectorManagerBean.configureSysLogForwarding(LogCollectorManagerBean.java:225) [log-collector-manager.jar:]

    ... 160 more

 

 

 

Solution

 

1. Add an IP address that does not exist, such as x.x.x.x

 

2. When a nonexistent IP is added, replace it with the original IP. whereupon log forward will begin to function.

 

3. If the issue persists, please get in touch with JTAC support for further assistance 

 

Modification History

2025-11-19 : Article Created