03-15-2007 10:37 AM - edited 03-10-2019 03:30 AM
I let MARS auto discover a large chunk of my network. In doing so, the reporting interfaces of those devices is not what I want them to be (it added them with the Ethernets not the Loopbacks which it uses as source-interface for logging etc.) I was wondering if there is an easy way to delete large chunks from that table or the entire table to start fresh with a seed file? (or easily change the devices that need changing.. approx 125 all IOS based) The appliance is very new and I don?t mind starting from a clean slate for the reporting/monitoring devices (I have had netflow reporting to the appliance for about 2 weeks but haven?t made any major modifications to the appliance as yet). Is there an easier way to do this then one by one from the GUI?
Thanks!
Ken
03-15-2007 10:40 AM
You could do a pnreset, which "resets" the database to factory defaults.
03-15-2007 11:10 AM
After the pnreset, if I then load from the seed file, do I need to do anything besides "activate" it? The manual refers to "check it's connectivity or perform discovery".
Can I also take all networks out of the "Valid Networks" section of "Topology Discovery Information"? I only want discovery and auto updating of the devices that I place in the seed file (which will have Loopbacks as reporting interfaces).
Thanks!
Ken
03-15-2007 11:26 AM
"After the pnreset, if I then load from the seed file, do I need to do anything besides "activate" it?"
events should start being correctly parsed as soon as you activate the devices. However, you may need to manually configure some information. Will you enable "monitor resource usage"? For Cisco IPS sensors, you must add the monitored networks. there are some other device specific caveats. You will want to run a query that shows you reporting devices ranked by number of sessions to make sure all devices are reporting in.
"Can I also take all networks out of the "Valid Networks" section of "Topology Discovery Information"
You shouldn't need to. pnreset removes all configuration data from the database.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide