I'm running CSIDS Analyzer 2.2.3 with the latest patches. Sensors are running at 3.1(5)S65 on Solaris 8.
I am getting a message when I go to delete events that the system cannot delete the event, it then asks me if I want to hide the event. Initially, I used to do this. But now I have events left over from October of last year. Since I cannot delete them via the console, what file do I need to clean out in order to remove these older events?
If it is a matter of cleaning the dB, what command do I need to issue in order to clean out these older events, but keep the more recent events?
Thanks in advance,
Dan