OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Apers, Kim (ISS Brussels) (KApersiss.net)
Date: Tue Sep 11 2001 - 02:24:12 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
    majordomoiss.net Contact issforum-owneriss.net for help with any problems!
    ----------------------------------------------------------------------------

    If you only installed RS 6.0 console and MSDE and you monitor still 5.x
    sensors then you need to upload the local data into MSDE.

    See manual for correct action, look in options, database there is an import
    function to upload 5.x data (which is still stored in msaccess local) into
    the SQL database. Reports are done on the SQL database. Don't forget to
    synchronize all logs to have the latest events.

    Once this is done, you should be able to make a new filter and select logged
    sensors.

    Other solutions is upgrade sensor to 6.0, the sensors will send events
    automatically into SQL (no more synchronize).

    -----Original Message-----
    From: Geldard Valle [mailto:gvallenextgeninter.net]
    Sent: dinsdag 11 september 2001 0:37
    To: issforumiss.net
    Subject: Problem with reports of 5.5 console

    TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
    majordomoiss.net Contact issforum-owneriss.net for help with any
    problems!
    ----------------------------------------------------------------------------

    I have problems to generate reports en 5.5 console ... I have monitored 2
    sensors , the sensors are in two different networks segments and I need one
    report by segment , but when I try to get the reports, the logs are
    combined, that is it contains information from both sensors .

    I try to conecting only one sensor and then sincronized the logs, but
    the result is the same.

    I see that in the 6.0 console you have the option to select the sensor that
    you want make the reports , I installed this version of the console but I
    have problems because when I select the report criteria ( the sensor
    Identity ) I don't see any information in the report.

    Some person have any experience with this kind of problems ?

    Thanks

    ----------------------------------------------------------------------------
    -
    Geldard Valle Meza
    CCSA, ISS GOC Security Engineer
    Nextgen Internet
    Worldwide Headquarters, Plainsboro NJ.