TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

I also experience this problem. I have an installation with 3 RS OS Sensor 5.0
NT
and 7 RS OS Sensor Aix. All of them seem to reset their log settings with
different
intervals. This is very strange and there doesn't seem to be any reason for
this.

Yesterday they all reset their log settings when I updated the sensors response
settings:
I went over all ten sensors and did a "replace with global responses". They all
restarted
and had their log settings back to default (with no watermark enabled).

There must be a reason for this, and hopefuly a solution. I'm tired of
reconfiguring the sensors!

Hope someone finds a solution...

Gunnar Alendal
Bull AS
Norway.

"memyselfandi" <memyselfandinewsguy.com> den 03.03.2001 14:12:35

Send svar til memyselfandinewsguy.com

Til: mmorabitofrontway.com
cc: issforumiss.net (bcc: Gunnar Alendal/NO/BULL)
Emne: RE: ISS RS Log Setting Question

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

We don't have this issue, so the short answer is I don't know, but...

How large is your console database, assuming rsntclientlog.mdb if using the
default (actual size, not records)? From the console, does clicking file,
and then maintain database show you a record count when the dynamic upload
unchecks itself on a particular sensor? I'm a little unclear on whether ALL
sensors exhibit this problem at once at irregular intervals, or ALL sensors
(but
not necessarily at the same time) exhibit the problem at irregular
intervals?
Hope that made sense :). Is your master console 5.0 or 5.5?

Greg

-----Original Message-----
From: owner-issforumiss.net [mailto:owner-issforumiss.net]On Behalf Of
mmorabitofrontway.com
Sent: Friday, March 02, 2001 3:20 PM
To: supportiss.net; issforumiss.net
Cc: sherringfrontway.com; dhamrickiss.net
Subject: ISS RS Log Setting Question
Importance: High

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any
problems!
----------------------------------------------------------------------------

All,

I have several separate installations of Realsecure a different sites. I
have OS Sensors v5, Server Sensors v5.1, and both NT4/W2K v5 and Nokia v4.6
Network Sensors. I have Workgroup Manager 5 in one location and 5.5 in
others. I have over 30 sensors on which the problem occurs. I think I have
almost all possible configurations covered.

All exhibit the same problem at irregular intervals.

While monitoring sensors, I right click one and select "Maintain Logs." In
the dialog box that opens, I select the checkbox for "Dynamic Upload" and
change the default percentage from 90% to 12% [upon a recomendation 10
months ago from ISS Support that setting below 10% would not function]. I
click OK to save the settings. After this point I have restarted the senor,
rebooted the device, or left it alone.

At irregular intervals, I have reattached to some sensors and seen them
synchronize 5000 records. I right click one and select "Maintain Logs" and
see that the "Dynamic" checkbox is UNCHECKED and the percentage is reset to
90% and grayed out.

I have reset the log settings to my standard on each device and found hours,
days, or weeks later that they have returned to factory default.

What, if anything, am I doing wrong? How can I ensure that these settings
stay in place?

Is anyone else experiencing this problem? Has anyone specifically looked
for this on their own sensors?

I have posted this question previously to the Forum and coppied Support. I
have received a variety of answers ranging from "you musy apply the policy
after saving it" [does not apply as this is NOT a "policy" setting] to
"reinstall the RSWM" [has no effect] and "reboot" [a little vague].

Any help will be appreciated.

Thanks,
Mike Morabito

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]