cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
875
Views
0
Helpful
2
Replies

FMC no user activity (Firepower Management Center 1500)

license_fgce
Beginner
Beginner

Hi, everybody.

 

Faced with such a problem. (which probably occurred after the DC update) 

 

FMC1500

Software Version 6.3.0.4 (build 44)
OS Cisco Fire Linux OS 6.3.0 (build21)

 

No user activity in Analysis -> User -> User Activity.

 

I am using Cisco Firepower User Agent for Active Directory v2.3 build 10, on a DC.

everything is green in it. (see agent_ad, agent_fmc)

 

When troubleshooting with the tool utility. everything is successful

See (trblsh_ad trblsh_fmc)

Export IPv4 addresses with mapped users - displays current user information

 

Configuration on FMC see directory.jpg, identity_sources, ldap.jpg

Groups and users load successfully.

 

In the screenshot adi_health the output of the command cat /var/sf/run/adi-health.

 

output of the command tail -f /var/log/messages see mess_log.

There are a lot of messages like -> TimeSeries [7689]: [WARN] insertSample : error in RRDs::update()

 

Does anyone have any ideas on how to fix this problem or what other checks can be done?

 

Thank you in advance.

 

 

2 REPLIES 2

cybergeezer
Cisco Employee
Cisco Employee

time seems way off illegal "attempt to update using time 1624948860 when last update time is 2114381220 (minimum one second step)"

putting the first one  {1624948860} in epoch time converter GMT: Tuesday, June 29, 2021 6:41:00 AM

putting second one (2114381220) in epoch time converter GMT: Thursday, January 1, 2037 12:07:00 AM <== way in the future

run 'sudo sftunnel_status.pl' on the DC and on the sensor

Hello, cybergeezer.

Thank you so much for your answer.

I hope DC means defense center?

I attached the output files from the FMC and from one of the sensors.

Thank you in advance.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: