TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
I have a problems with reports too. Two weeks ago I installed the WorkGroup Manager 6.5, and all events from Network Sensor are loged into dbo_EventsRejected table in ISSED database. I tried to install patch and all finished OK, but when I check database: "select max(currentdate) from eventday" the dbo_Eventday table is empty and all events are in dbo_EventsRejected table (not in dbo_Events). Which SQL command should I run to move events from dbo_EventsRejected to dbo_Events table ? Why EventCollector didn't log events into dbo_Events table ? Thanks for helps. Regards, Przemek -----Original Message----- From: Paul Van Gurp [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 23, 2002 2:02 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: Problems with reports TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- There was a critical patch released by ISS which will make all events go to rejected table if you don't patch your SQL DB. You have to go to the ISS website and apply the patch. The link is: https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_alp.php It is a simple update and things went well for me. I hope that helps. Paul -----Original Message----- From: Vasil Iossifov [mailto:[EMAIL PROTECTED]] Sent: Monday, July 22, 2002 12:02 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Problems with reports TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Dear Sirs, I have some problems with RealSecure 6.0. Our company bought one network sensor and a Workgroup Manager. I installed them on separate machines as follows : 1. On a Siemens-Fujitsu (Pentium 4, 256MB RAM, 30GB HDD) I installed Windows 2000 Professional. From Microsoft website I downloaded MDAC 2.6 and installed it. From ISS CD I installed MSDE 8 (2000). Afterwards I installed Workgroup Manager (RealSecure Console, Event Collector, Enterprise Database, Assets Database). At that point there was no errors. 2. On Sun Ultra 1 I installed Solaris 7 and applied recommended patches. From ISS CD I installed ISS daemon and ISS network sensor. From /etc/init.d I started realsecure script. At that point there was no errors. 3. I put the license key and I started Deployment Wizard. It's binary was damaged, so I downloaded new version and applied it. After starting it I defined event collector (which resides on RealSecure Console host) and a network sensor (which resides on Sun Ultra 1). The communication between console and sensor was OK. I started RealSecure Console and configured the event collector to manage the network sensor. After that I applied Maximum Coverage policy to the sensor. Everything went OK. There was a lot of events records in the Console, so I decided to generate a report. The report was empty. I tested any of the pre-defined reports and the result was the same. That's why I have the following questions: 1. What is the reason for empty reports? I tried to check manually MS SQL database and I noticed that every event is recorded in dbo_EventsRejected table of ISSED database. I suppose that the report is empty, because there are no records in dbo_Events table. 2. Is it a problem of configuration and if so how to configure sensor, event collector and database? Please, answer me as soon as possible. Any help will be appreciated. Thanks in advance. Best regards Vasil Yosifov -- Vasil Yosifov Information Security Specialist Sun Support Engineer _______________________________________________________________________ ACT Sofia Ltd. Tel: (+359 2) 971 83 54 "Tzarigradsko shosse" blvd. Fax: (+359 2) 971 83 43 7km., BIC-IZOT, Mobile: (+359) 98 50 50 78 Office 710-714 http://www.actsofia.bg 1784 Sofia - Bulgaria
