"I do not see the alerts that I am suppose to see."
What type of alerts are you looking for? System events or signature alerts? You don't see alerts from IDM or from the CLI?
The two events you have in your post look certificate related. When you reimaged the IDSM a new TLS certificate was generated, then you'll have to update your TLS trusted-host. Just to start fresh I'd try doing the following, this process has resolved my TLS issues in the past.
sensor# tls generate-key
sensor# sh tls trusted-host (to see if any IP's are currently in the table)
sensor# conf t
If there are any trusted-host IP's in the table, then remove them.
(config)#no tls trusted-host ip-address x.x.x.x
Next, add IP's back into the trusted-host table.
(I have also been able to leave the trusted-host table empty and had cisco works IP's add themselves to the trusted host table automagically, but then other times I've had to manually add them.)
(config)# tls trusted-host ip-address (host IP that you will use to connect to the sensor webserver.)
This will ask if you want to add the host to the trusted host table, you will answer yes.
After that try IDM again. Then from the CLI you can verify that you aren't seeing the TLS events anymore with the "show events" command. And then you can also verify that your getting alerts with the show events alert past hh:mm:ss command. Or alternatively just confirm the IDSM is seeing traffic by logging in as tac, su to root, and then do a tcpdump on the sensing interface.
Maybe a little more information then you needed on verifying the traffic, but hopefully something in the above will help you.
