cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
475
Views
0
Helpful
2
Replies

IEV database archiving does not work

jvanderbijl
Level 1
Level 1

Recently I installed the CSM 3.1 suite, which comes with IPS Event Viewer version 5.2(1.4).

I have set up the automatic archive feature to archive the IEV database daily at 23:45, but this doesn't work. I do get daily archive files with a size of 0 bytes. The realtime table isn't reset and contains all events collected by IEV so far.

I have looked into this problem a bit and the only indication that something is going wrong I found in the file C:\Program Files\CSCOpx\IPSEventViewer\IEV\log\system.log.

The message:

"Cannot execute MySQL query: insert into archive_table_20070521105454 select * from event_realtime_table where alarm_status='New' or alarm_status='Acknowledged' or alarm_status='Assigned' or alarm_status='Closed' because of error: Column count doesn't match value count at row 1" is logged.

Does anyone have any clues?

2 Replies 2

paulnguy
Cisco Employee
Cisco Employee

Please contact TAC for the appropriate patch. Regards.

bmcginty-ltk
Level 1
Level 1

I have an open TAC case on this EXACT issue. Developers are still working on the patch. Also, check out this Field Notice:

FN - 62822 - Cisco Security Manager 3.1 - Software Removed

http://www.cisco.com/en/US/customer/products/ps6498/products_field_notice09186a00808434e7.shtml

Review Cisco Networking products for a $25 gift card