06-18-2013 08:41 AM - edited 03-10-2019 05:59 AM
Hello all,
I am running IME on a new computer and after instalation the Event Monitoring tab doesn't want to pull any past events when I tell it to. When I do it says "No events are found for this time period". It still continues to work on the old computer that I have IME installed on. Interestingly, if I am currently connected to IME when an event fires I can see it come up and it is retrevable via the Event Monitoring tab, I am just unable to see any past events. This also affects the Reports and dashbords.
I am running IME version 7.2.3 and everythign else is working. I am able to pull events via the Configuration>sensor Monitoring>Events just fine and I can otherwise manipulate the IPS. On the devices list I can see the IPS as connected under event status and global corrilation. Everything seems to be working other then getting past events or events that happened while IME was not on.
I have doublechecked the MySQL-IME service and restarted it as well and that appers to be working. The only errors I see in the IME Console window are related to the RSS feed.
I do see some errors in the service-log like this:
2013-06-18 08:59:45,458 WARN - [dc.realtime.SensorEventPollingThread] IPS-NAME: error in get() Error code: env:Sender subcode: sd:errNotFound Reason: Subscription does not exist
2013-06-18 08:59:47,490 WARN - [dc.realtime.SensorEventPollingThread] IPS-NAME: re-subscribe with current time
2013-06-18 09:03:16,482 WARN - [dc.realtime.SensorEventPollingThread] IPS-NAME: error in get() Network is unreachable: connect
These errors seem to be related, but I'm not sure how to remedy that. Any Sugestions? I have tried compleatly disabling the computer's firewall and I have verified that I have full connectivity between the end station running IME and the IPS. I've also verified that the system times are correct.
Thanks.
07-05-2013 03:23 PM
Hi,
Could you please remove the IPS device from the IME, regenerate the certificate (tls-generate) and add the IPS again.
If this doesn't work you may want to re-install the IME on the PC.
HTH
Luis Silva
"If you need PDI (Planning, Design, Implement) assistance feel free to reach"
http://www.cisco.com/web/partners/tools/pdihd.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide