topic IPS Event Viewer in Network Security

IPS Event Viewer

siscisco05 — Sun, 10 Mar 2019 10:29:17 GMT

Hello,

I use IPS Event Viewer to run some reports for an IPS 4215. This week when I ran a report and click on the graph there are blocks of time that show no events being logged at that time. But when I look for events during this same time period on the IDM or CLI they show up.

Is there a reson for this?

Thanks for any info.

Re: IPS Event Viewer

rhermes — Wed, 28 Feb 2007 18:41:53 GMT

Check the severity of the events missing on your Event Viewer report. You may have only selected to download Med and High severity events to the Event Viewer. (I think this is the default for VMS)

Re: IPS Event Viewer

ymzhang — Wed, 28 Feb 2007 19:21:21 GMT

The alarms might have already been archived in archival table (by default config, it archives everyday). So if you try to drill down from the Realtime Graph, you won't see the alarms. I think you can try to use "Statistics Graph" which can be reached by right-click the View name.

Hope this helps,

-Chris