OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[ISSForum] [ISSForum]Problems with Reporting features (WGM6.7) & 4 X Network Sensor 7.0

From: ISSQuestion (issquestionhotmail.com)
Date: Thu Aug 07 2003 - 02:08:02 CDT

Hi,
My deployment is one wgm6.7 sp1, with 4 ISS network sensors installed on nokia boxes.

WGM is installed with EC 1.5 and SQL2000 Sp3 in a intel box, PIII, 1GB RAM 30G HDD.

My four sensors are namely:-
      IDSSENSOR1M- 172.10.2.2
     
      IDSSENSOR512 - 172.10.2.3
     
      IDSSENSORINT - 172.10.2.4
     
      IDSSENSORREM - 172.10.2.5
     

However in the wgm, they are using different IPs but with the same names (network_sensor_1).

Recently, I did a backup

osql -E -Q "BACKUP DATABASE ISSED TO DISK = 'c:\Program Files\temp' and then ftp to my laptop.

On my laptop, I am also running WGM6.7 sp1 and SQL2000 Sp3 only. No managed sensors at all.
My laptop is PIII 450, and 20G HDD, 256MB RAM.

and then I did a restore on my laptop.

osql -E -Q "RESTORE DATABASE ISSED FROM DISK = 'D:\temp\ISSED.BAK'"

And it restored okie.

Now, I want to use the reporting feature of WGM.

Query 1
However, when I do the preview, and under sensor identity and logged sensors.
I am able to see 4 sensors, but 3 sensors with the correct IPs and with one sensor with IP of 10.10.10.1.

How do I bring out the last sensor?
I have checked with ISS-ASIA many times, but to no anvil.

Query 2
In the reporting feature, I did not choose any sensors and I did a preview or run the report, under network only ->eventpriority
It came out to be 17MB size.

When I randomly choose a sensor and run the same configs.
I also got the same file size.

Using the export feature to export to crystal feature, the two reports are identifical.
I tried to run for all sensors, and they are all the same.

Is there a way that I can generate reports that will show particular sensorIP / name?

How do I generate reports for individual sensor?

Please help & advise.

Thanks!

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo