On my remote event collector server (Event Viewer logs) which stopped reporting. (EventCollector_XXXXX)- Could not decrypt database password from policy file. Via the https interface I get this error An Error has occurred. Error Message:Connection refused. No connection could be made because the target machine actively refused it. This usually results from trying to connect to a service that is inactive on the foreign host - there is no server application running. [ID=0xc721003e] Another error (EventCollector_XXXXX) - Fatal error! The Event Collector cannot connect to the database or there is a database error: The Event Collector must shutdown its connection to the database and the sensors in order to prevent events from getting lost. This could be due to a misconfiguration of the Event Collector, network communication problems, or a problem with the database itself (e.g. database full). [ID=0xc734002f] Which it is not. >From the desktop controller (DesktopController_XXXXX) - OnError from 192.168.30.15: The credentials (name, public key) announced by the peer during session authentication conflict with those configured for this session. [ID=0xc7200005] The database is located on 192.168.10.10 which can talk fine to 192.168.30.15 (remote event collector) Thoughts?
Steven Nichols _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
