unable to view IDS logs from cisco VMS server

[rajaykumar_78]

Hi,

Pls help me out for viewing IDS logs from my cisco vms server (4th edition with SP2,java 1_4_1.02)

Configured IDS sensor with IDS MC (2.0.1) and updated signatures with latest sig files,

Configured Security monitor to view my IDS sensor and showing TLS was connected and cisco IDS REDP/SDEE,when viewing logs error was server codes need to be update., unreconiged last saved IDS alarms.

Pls give me the solution

Regards

Ajay

[sachinraja]

hi ajay,

try restarting the ciscoworks daemon manager services .. make sure you start back all the services associated with ciscoworks...

or else, delete the IDS and add it again, using auto configuration..

all the best.. do let us know..

[sachinraja]

Hi Ajay,

when you upgrade to sec mon 2.0.1, the database is the same, but the formats are different.. you need to do somethings for converting these formats, which might take hours together, if ur database has too many events...

for information to convert the file format, refer to this URL:

http://www.cisco.com/en/US/products/sw/cscowork/ps3990/prod_release_note09186a0080386f72.html#wp1087204

see the section "Using the ConvertAndImport.pl Script after Upgrading from Security Monitor 1.2.3 to Security Monitor 2.0.1 "

do this and see.. let us know

Raj