01-31-2018 03:20 PM
I've got pxGrid configured on the SMC and it appears to be registering correctly however I see no user information in the SMC.
When looking at the SMC there is a green light and it appears that everything is good however, it isn't getting user information. I also have Firepower management center joined via pxGrid and I am seeing user information there. Below is the logging I get when I change the configuration on the SMC and try to join it again.
TrustSecMetaData-1.0 | Client subscribed | 4:22:03 PM CST, Jan 31 2018 |
TrustSecMetaData-1.0 | Client subscribed | 4:22:03 PM CST, Jan 31 2018 |
EndpointProtectionService-1.0 | Client subscribed | 4:22:02 PM CST, Jan 31 2018 |
Core-1.0 | Client subscribed | 4:22:02 PM CST, Jan 31 2018 |
SessionDirectory-1.0 | Client subscribed | 4:22:02 PM CST, Jan 31 2018 |
Client online | 4:22:02 PM CST, Jan 31 2018 |
Client offline | 4:22:01 PM CST, Jan 31 2018 |
Core-1.0 | Client unsubscribed | 4:22:00 PM CST, Jan 31 2018 |
TrustSecMetaData-1.0 | Client unsubscribed | 4:22:00 PM CST, Jan 31 2018 |
SessionDirectory-1.0 | Client unsubscribed | 4:22:00 PM CST, Jan 31 2018 |
EndpointProtectionService-1.0 | Client unsubscribed | 4:22:00 PM CST, Jan 31 2018 |
TrustSecMetaData-1.0 | Client subscribed | 12:17:22 PM CST, Jan 31 2018 |
TrustSecMetaData-1.0 | Client subscribed | 12:17:22 PM CST, Jan 31 2018 |
EndpointProtectionService-1.0 | Client subscribed | 12:17:22 PM CST, Jan 31 2018 |
Core-1.0 | Client subscribed | 12:17:21 PM CST, Jan 31 2018 |
SessionDirectory-1.0 | Client subscribed | 12:17:21 PM CST, Jan 31 2018 |
Client online | 12:17:21 PM CST, Jan 31 2018 |
Client offline | 12:17:19 PM CST, Jan 31 2018 |
Core-1.0 | Client unsubscribed | 12:17:19 PM CST, Jan 31 2018 |
TrustSecMetaData-1.0 | Client unsubscribed | 12:17:19 PM CST, Jan 31 2018 |
SessionDirectory-1.0 | Client unsubscribed | 12:17:19 PM CST, Jan 31 2018 |
EndpointProtectionService-1.0 | Client unsubscribed | 12:17:19 PM CST, Jan 31 2018 |
TrustSecMetaData-1.0 | Client subscribed | 12:16:58 PM CST, Jan 31 2018 |
TrustSecMetaData-1.0 | Client subscribed | 12:16:58 PM CST, Jan 31 2018 |
Solved! Go to Solution.
01-31-2018 05:54 PM
I heard there might be a bug in early 6.10 and the following might help:
To restore sessions in your lab execute the following on the SMC CLI:
rm -rf /lancope/var/kafka/data/
rm -rf /lancope/var/zookeeper/data/
systemctl restart LCOrchestrate
systemctl restart lc-tomcat
If that does not help, you might check with the StealthWatch alias or open a support case.
01-31-2018 05:54 PM
I heard there might be a bug in early 6.10 and the following might help:
To restore sessions in your lab execute the following on the SMC CLI:
rm -rf /lancope/var/kafka/data/
rm -rf /lancope/var/zookeeper/data/
systemctl restart LCOrchestrate
systemctl restart lc-tomcat
If that does not help, you might check with the StealthWatch alias or open a support case.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide