TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

I have experienced similar problems with the 5.5 console running the 5.0
engines and sensors. The Auto Sync works normally and downloads any
outstanding events once the threshold has been reached. However, if any new
events have been generated since the Auto Sync started, it starts another
Auto Sync run to download the new events. If any new events have been
generated since *that* Auto Sync started ... and so on, until there are
absolutely no new events to download. On a busy proxy server (for example),
this may never happen, and in the meanwhile, the other Auto Sync activities
may start to queue up...

Unfortunately, I have not found a solution to this one. Stopping the DB
operation rarely works without freezing the entire console. Restarting the
console *will* stop this, but who wants to restart the console every time
this happens?. You can also pause that particular sensor (if the console
will let you) until the DB operation is complete, but the sensor is
essential blind for those few seconds and there is no way (that I know of)
to automate this. Anyone else with better solutions than this?

Gary McIntyre

----- Original Message -----
From: ""Steve Robinson" <sfrmediaone.net>LGS"
<IMCEANOTES-+22Steve+20Robinson+22+20+3Csfr+40mediaone+2Enet+3E+40LGSe-comm
erce.com>
To: <jeferson.stabilleintersix.com.br>; "IssforumIss.Net"
<issforumiss.net>
Sent: Tuesday, January 16, 2001 5:36 PM
Subject: RE: RealSecure: Sync Problems

>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
> majordomoiss.net Contact issforum-owneriss.net for help with any
> problems!
> --------------------------------------------------------------------------

--
>
> Jeff,
>
> It sounds like the database is filling up faster than the sync can keep up
> with it.  Have you tuned the policy to eliminate noise? How fast are your
> logs on the console growing?  I would suggest setting this threshold up to
> around 125k to see if this is the problem
>
> Steve Robinson
>
>
> -----Original Message-----
> From: owner-issforumiss.net [mailto:owner-issforumiss.net]On Behalf Of
> Jeferson Stabille
> Sent: Tuesday, January 16, 2001 5:40 AM
> To: IssforumIss.Net
> Subject: RealSecure: Sync Problems
>
>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
> majordomoiss.net  Contact issforum-owneriss.net for help with any
> problems!
> --------------------------------------------------------------------------
--
>
> Hi,
>
> I'm having problems with Real Secure Sync process. After 25k log entries,
> Real Secure initializes the sync process normally. After that, Real Secure
> starts the sync process continously, for every new group of entries,
without
> waiting to reach the water mark again (25k log entries).
>
> My environment is composed by:
> - ISS Real Secure Management 5.0
> - ISS Real Secure NetWork Sensor 5.0
> - Windows NT 4.0 WKS + Sp6
> - SQL Server 7 as Database Server
>
> Best Regards,
> Jeferson Stabille
>
>
>
>
>
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]