cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1880
Views
15
Helpful
6
Replies

Duplicate MIDs

joelbland
Level 1
Level 1

Hi everyone,

We have 3 ESAs in a cluster reporting to an SMA. We have been seeing more duplicate MIDs when searching message tracking in the SMA. As I understand it, clustered ESAs do not coordinate MID generation. But is it possible to seed the starting MID number, on each of the ESAs, far enough apart so that MIDs would not conflict with each other?

https://supportforums.cisco.com/sites/default/files/media/duplicate_mids-sanitized.png

6 Replies 6

dmccabej
Cisco Employee
Cisco Employee

Hello,

We do not support changing the MID value. Due to this, my recommendation would be to perform more advanced searches to narrow down your results. For instance, you can select which ESA to search against, which can help mitigate against duplicate MID results on separate appliances.

Thanks!

-Dennis M.

marc.luescherFRE
Spotlight
Spotlight

The more ESA's you have the more likely this will be the case for MID, and DCID's. Beside searching only on one appliance at a time if you search a smaller time window you will also find less matches.

Maybe be should ask Cisco to open a feature request to be able to prepend a letter or hostname like you can for the log files.

Great idea, Marc. I've submitted a feature request.

What features would be changed or added?

Two possible solutions:

  1. Give AsyncOS the ability to automatically coordinate MID generation between clustered ESAs.
  2. Give customers the ability to prepend/append a letter or hostname like you can for log files.

did you get a feature request number you could share ?

Yes, and once the Release Notes are approved, it will show up in the Bug Search Tool.

Here's a direct link:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve28569

Thank you for your efforts.
Unfortunately, more than 4 years later, the situation remains the same ...