For some reason, our MARS has stopped pulling alerts from the IPS modules in the ASA's. The IPS modules are SSM-20's running version 7.0(8)E4. I removed and re-added the one IPS module without any luck. If I go into IME, the IPS has alerts, but none are getting to the MARS. This was working last week. I do see this one error in the IPS modules:
evError: eventId=1339001763298281005 vendor=Cisco severity=error
originator:
hostId: ips
appName: collaborationApp
appInstanceId: 516
time: Jun 25, 2012 14:26:07 UTC offset=0 timeZone=UTC
errorMessage: Failed to upload data name=errUnclassified evError: eventId=1339001763298281005 vendor=Cisco severity=error
originator:
hostId: ascips
appName: collaborationApp
appInstanceId: 516
time: Jun 25, 2012 14:26:07 UTC offset=0 timeZone=UTC
errorMessage: Failed to upload data name=errUnclassified
However, I cannot find anything on if this is relavent to my issue and if so, how to fix it.
TIA for any suggestions/help.
Dan
