Message Broker Handler is not running

Message Broker Handler directs traffic between Event Message Brokers to balance the load of data being processed.

If only Message Broker Handler is stopped, data cannot be redirected to a second Event Message Broker.

If both Message Broker Handler and Event Message Broker are stopped, cloud application data and SIEM data are not forwarded or processed.

Message Broker Handler is used to support a single Event Message Broker.

If only Message Broker Handler is stopped, Event Message Broker continues to process SIEM data. If both Message Broker Handler and Event Message Broker are stopped, SIEM data processing stops.

Message Broker Handler must be restarted first. Event Message Broker cannot restart if Message Broker Handler is stopped.

To address this issue:

• Windows: Use the Windows Services tool to start Websense Message Broker Handler.
• Linux: Use the /opt/Websense/WebsenseDaemonControl command to start Message Broker Handler.
• On an appliance: Use the CLI command to start Message Broker Handler. See the Forcepoint Appliances CLI Guide.