Solved: IME 7.0 not generating a report

n3tw0rker · ‎09-15-2009

Hi

We have a 7.0 IME installed in a 32 bit Win2k3 server. I am managing 2 IPS 4240 appliance in my IME. It is used to be 6.2 and I upgrade it to 7.0 because I upgrade our IPS. There is no error showing or disconnection. In the event monitoring I can see packets in different severity but when I generate report it says no record found. Even for informational.

Any idea.

andrey.dugin · ‎10-16-2009

I think that PC with IME at least once was affected to poweroff without correct termination of work.

Run cmd, then go to

C:\Program Files\Cisco Systems\Cisco IPS Manager Express\MYSQL\bin

type:

> mysql -P 47007

then:

mysql> use alarmdb;

Database changed

mysql> select * from event_data_manager;

+-------------+-----------+---------------------+---------------------+

+-------------+-----------+---------------------+---------------------+

find number with "true" value in "cur_table" column.

For example, it may be 10.

Then go to C:\Program Files\Cisco Systems\Cisco IPS Manager Express\MYSQL\data\alarmDB and find event_table_10.MYD

It must be some symbols added to extension .MYD, for example, event_table_10.MYD.3f4d

You must rename it to its original filename event_table_10.MYD

That's all. Your IME 7 must work properly.

View solution in original post

andrey.dugin · ‎10-16-2009

I think that PC with IME at least once was affected to poweroff without correct termination of work.

Run cmd, then go to

C:\Program Files\Cisco Systems\Cisco IPS Manager Express\MYSQL\bin

type:

> mysql -P 47007

then:

mysql> use alarmdb;

Database changed

mysql> select * from event_data_manager;

+-------------+-----------+---------------------+---------------------+

+-------------+-----------+---------------------+---------------------+

find number with "true" value in "cur_table" column.

For example, it may be 10.

Then go to C:\Program Files\Cisco Systems\Cisco IPS Manager Express\MYSQL\data\alarmDB and find event_table_10.MYD

It must be some symbols added to extension .MYD, for example, event_table_10.MYD.3f4d

You must rename it to its original filename event_table_10.MYD

That's all. Your IME 7 must work properly.

n3tw0rker · ‎10-16-2009

I think this might work if I tried it before. But this issue is already resolved when I redo the installation from 6.2 to 7.0 w/ a clean install. Just make sure everything is working properly / IPS monitoring are all connected.

Thank you for the reply.