In my attempts to get the sourcefire connector working, I have found
this in the log after increasing the log level...
event escalator:MESSAGE:2012-12-01 01h05.26 UTC:2755: The escalator
for task Example task was triggered (Event: Task status changed to
'Done', Condition: Always)
md
Ah, these are the wrong log message corresponding to the escalator
test. There is actually nothing in the logs regarding an internal
error
However, if I test with omp
omp -h 192.168.1.46 -u admin -w password -X test_escalator
escalator_id='a9051377-1a5d-46a9-85e7-70d006062676' /
FWIW, centos 6.3 running from atomic repos.
On Fri, Nov 30, 2012 at 7:17 PM, Brandon Perry
bperry.volat...@gmail.com wrote:
Ah, these are the wrong log message corresponding to the escalator
test. There is actually nothing in the logs regarding an internal
error
However, if I test with omp
Here is the escalator I am attempting to get working.
get_escalators_response status_text=OK status=200
escalator id=a9051377-1a5d-46a9-85e7-70d006062676
nametry/name
commentfdsa/comment
in_use0/in_use
conditionAlways
datachanged
namedirection/name/data
dataHigh
Hi, trying to get the Sourcefire Connector escalator to work, but
having difficulties.
If I create a new escalator from omp, say:
escalator id=e3ce3160-a621-4fc4-a967-2ff706fde46e
nameDaily/name
comment/comment
in_use0/in_use
conditionAlways
datachanged
I should also mention I am running on ubuntu 12.04, compiled from
source.
On Sat, 2012-11-17 at 09:15 -0600, Brandon Perry wrote:
Hi, trying to get the Sourcefire Connector escalator to work, but
having difficulties.
If I create a new escalator from omp, say:
escalator
Sorry, one more thing. In openvasmd.log, the only log message related to
running the escalator is this:
event auth:MESSAGE:2012-11-17 15h03.58 utc:4377: Authentication success
for user username (ed2e15d2-3be5-4ff6-b41a-4d959ace8b46)
event auth:MESSAGE:2012-11-17 15h05.15 utc:4380: Authentication
Hi,
There a two days to interact with the SF, one is via report-format, the
other is via connector automatic, that needs a DC Certificate !
You need to install the connection to be able to run it, have you tried
the report format plugin first ?
I can´t see the DefenceCenter Certificate in
There actually is one in the pkcs12 part, but I replaced it with blah.
The PKCS12 should be valid...
On Sat, 2012-11-17 at 16:39 +0100, Lukas Grunwald wrote:
Hi,
There a two days to interact with the SF, one is via report-format, the
other is via connector automatic, that needs a DC
