Environment
NetIQ Sentinel 7.x
Situation
Any data source that detects enterprise activity and generates log records to report that activity is called an Observer in Sentinel, because it is observing the actions that users and services are performing in the environment. Generated log records are delivered to Sentinel for parsing and normalization via a collector. In some cases an updated collector is needed to fix issues like format changes on the event source, wrongly parsed events fixed in the current collector, or unparsed events. This video shows you how to update or upgrade a Collector.
Resolution
https://youtu.be/CBnuvRNfHQo