topic IDS Reports in Network Security https://community.cisco.com/t5/network-security/ids-reports/m-p/687160#M88273 <P>Hi all,</P><P>Got an IDS on 4215 and generating reports through VMS 2.3. At some point the VMS application crashed. After reinstallation with all similar parameters, the reports during the crash cannot be generated. So far, we understand that the logs are stored on the IDS and it was up and running.Any way of retrieving the info for the period where the VMS wasn't running?</P> Sun, 10 Mar 2019 10:19:54 GMT rjugnauth 2019-03-10T10:19:54Z IDS Reports https://community.cisco.com/t5/network-security/ids-reports/m-p/687160#M88273 <P>Hi all,</P><P>Got an IDS on 4215 and generating reports through VMS 2.3. At some point the VMS application crashed. After reinstallation with all similar parameters, the reports during the crash cannot be generated. So far, we understand that the logs are stored on the IDS and it was up and running.Any way of retrieving the info for the period where the VMS wasn't running?</P> Sun, 10 Mar 2019 10:19:54 GMT https://community.cisco.com/t5/network-security/ids-reports/m-p/687160#M88273 rjugnauth 2019-03-10T10:19:54Z Re: IDS Reports https://community.cisco.com/t5/network-security/ids-reports/m-p/687161#M88275 <HTML><HEAD></HEAD><BODY><P>IPS does have a 30 MB rotating EventStore which provides disconnected event store. The average event size is 1-2 K so the eventStore can sustain an average rate of 30+ events/second for more than 15 minutes. This information should have been written to the IDS_MC as soon as the connection with VMS re-establishes.</P><P></P><P>Try these links:</P><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids9/idmiev/swchap6.htm#wp193386" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids9/idmiev/swchap6.htm#wp193386</A></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_installation_and_configuration" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_installation_and_configuration</A></P></BODY></HTML> Sat, 25 Nov 2006 15:54:07 GMT https://community.cisco.com/t5/network-security/ids-reports/m-p/687161#M88275 bstremp 2006-11-25T15:54:07Z