topic Re: unable to view IDS logs from cisco VMS server in Network Security

unable to view IDS logs from cisco VMS server

rajaykumar_78 — Fri, 21 Feb 2020 07:56:56 GMT

Hi,

Pls help me out for viewing IDS logs from my cisco vms server (4th edition with SP2,java 1_4_1.02)

Configured IDS sensor with IDS MC (2.0.1) and updated signatures with latest sig files,

Configured Security monitor to view my IDS sensor and showing TLS was connected and cisco IDS REDP/SDEE,when viewing logs error was server codes need to be update., unreconiged last saved IDS alarms.

Pls give me the solution

Regards

Ajay

Re: unable to view IDS logs from cisco VMS server

sachinraja — Mon, 14 Feb 2005 07:25:55 GMT

hi ajay,

try restarting the ciscoworks daemon manager services .. make sure you start back all the services associated with ciscoworks...

or else, delete the IDS and add it again, using auto configuration..

all the best.. do let us know..

Re: unable to view IDS logs from cisco VMS server

sachinraja — Mon, 14 Feb 2005 11:06:25 GMT

Hi Ajay,

when you upgrade to sec mon 2.0.1, the database is the same, but the formats are different.. you need to do somethings for converting these formats, which might take hours together, if ur database has too many events...

for information to convert the file format, refer to this URL:

http://www.cisco.com/en/US/products/sw/cscowork/ps3990/prod_release_note09186a0080386f72.html#wp1087204

see the section "Using the ConvertAndImport.pl Script after Upgrading from Security Monitor 1.2.3 to Security Monitor 2.0.1 "

do this and see.. let us know

Raj