cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

862
Views
0
Helpful
2
Replies
license_fgce
Beginner

FMC no user activity (Firepower Management Center 1500)

Hi, everybody.

 

Faced with such a problem. (which probably occurred after the DC update) 

 

FMC1500

Software Version 6.3.0.4 (build 44)
OS Cisco Fire Linux OS 6.3.0 (build21)

 

No user activity in Analysis -> User -> User Activity.

 

I am using Cisco Firepower User Agent for Active Directory v2.3 build 10, on a DC.

everything is green in it. (see agent_ad, agent_fmc)

 

When troubleshooting with the tool utility. everything is successful

See (trblsh_ad trblsh_fmc)

Export IPv4 addresses with mapped users - displays current user information

 

Configuration on FMC see directory.jpg, identity_sources, ldap.jpg

Groups and users load successfully.

 

In the screenshot adi_health the output of the command cat /var/sf/run/adi-health.

 

output of the command tail -f /var/log/messages see mess_log.

There are a lot of messages like -> TimeSeries [7689]: [WARN] insertSample : error in RRDs::update()

 

Does anyone have any ideas on how to fix this problem or what other checks can be done?

 

Thank you in advance.

 

 

2 REPLIES 2
cybergeezer
Cisco Employee

time seems way off illegal "attempt to update using time 1624948860 when last update time is 2114381220 (minimum one second step)"

putting the first one  {1624948860} in epoch time converter GMT: Tuesday, June 29, 2021 6:41:00 AM

putting second one (2114381220) in epoch time converter GMT: Thursday, January 1, 2037 12:07:00 AM <== way in the future

run 'sudo sftunnel_status.pl' on the DC and on the sensor

Hello, cybergeezer.

Thank you so much for your answer.

I hope DC means defense center?

I attached the output files from the FMC and from one of the sensors.

Thank you in advance.

Create
Recognize Your Peers
Content for Community-Ad