cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
656
Views
0
Helpful
1
Replies

IME showing no events

leach_stuart
Beginner
Beginner

Hi,

I was wondering if someone could help with an issue I am experiencing at the moment with IME events.

I have two sensors (AIP-SSM-10's) installed with the lastest engine and signature versions, linking back to IME.  If I connect using IDM I can see plenty of events however if i look at either historic or real time events via IME there is no data.  The sensors have been added succesfully and I can go through configuration etc but just no events.

I am running IME Version 7.0.3

Any help would be much appreciated.

Thanks

Stuart

1 Reply 1

Siddharth Chandrachud
Cisco Employee
Cisco Employee

Hello,

Few things to check:

1. Check if you are seeing events on IPS via CLI or IDM first.

To access IPS via IDM:

https://

If yes, then there is no issue with IPS itself and the issue is IME related.

2. When you added the IPS device to IME, in 7.0.3, make sure you enter correct username and password for 'Event subscription'.

By default its the same username and password that is used for authentication.


3. start>run > services.msc

Restart:   Cisco IPS manager express

Now see if you start seeing events again.

- Sid

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers