cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Sensor health critical for Event Retrieval

143
Views
0
Helpful
0
Comments

Dear All,

I'm using Cisco IME 7.0.2 with Signature version 537.0 for monitoring all the attacks/events.

I have started facing CRITICAL status under Sensor Health for Event Retrieval from last 15 days.

If I go to Configure sensor health metrics, I see 300 secs for Yellow and 600 secs for Red which is the default setting I believe.

What should be the ideal config for yellow and red to avoid this critical status for event retrieval status???

And where do I see this event retrieval logs??? I cannot see any event logs for Yellow and Red settings.

Also, check the attached files depicting sensor settings and sensor health status for event retrieval.

Thanks & Regards,

Neeraj Shah

Mail : neeraj13684@gmail.com