Event Message Broker is not running

Administrator Help | Forcepoint Web Security and Forcepoint URL Filtering | v8.5.x

In v8.5 and v8.5.3, Event Message Broker processes cloud app and SIEM data.

In deployments with a single Event Message Broker, cloud app and SIEM data are not processed when the Broker is stopped. In deployments with multiple Broker instances, as long as the Message Broker Handler is running, other Broker instances process the data.

With v8.5.4, a single Event Message Broker receives SIEM data from its local Bridge Service. SIEM data is not processed when Event Message Broker is stopped.

To address this issue of Event Message Broker not running:

Windows: Use the Windows Services tool to start Websense Event Message Broker.

Linux: Use the /opt/Websense/WebsenseDaemonControl command to start Event Message Broker.

On an appliance: Use the CLI command to start Event Message Broker. See the Forcepoint Appliances CLI Guide.