cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
174
Views
0
Helpful
0
Replies
Highlighted
Beginner

ISS Incident Issue

Hi,

I configured the ISS Siteprotector to send the alarm to MARS 6.0.2. In MARS, if I query for this ISS NIDS, I can find the lot of alarm received with the session ID. But I am not able to see those events on Dashboard or in incidents lists as the log send by ISS Sitepreotector are logged in MARS database with session ID but MARS is not assign the Incident ID to those events.

How can force MARS to assign the Incident ID to those events so i can able to monitor properly.

Thanks,

Regards,

Mustafa