Dear All,
I'm using Cisco IME 7.0.2 with Signature version 537.0 for monitoring all the attacks/events.
I have started facing CRITICAL status under Sensor Health for Event Retrieval from last 15 days.
If I go to Configure sensor health metrics, I see 300 secs for Yellow and 600 secs for Red which is the default setting I believe.
What should be the ideal config for yellow and red to avoid this critical status for event retrieval status???
And where do I see this event retrieval logs??? I cannot see any event logs for Yellow and Red settings.
Also, check the attached files depicting sensor settings and sensor health status for event retrieval.
Thanks & Regards,
Neeraj Shah
Mail : neeraj13684@gmail.com