MARS not pulling IPS alerts

Unanswered Question
Jun 25th, 2012

For some reason, our MARS has stopped pulling alerts from the IPS modules in the ASA's.  The IPS modules are SSM-20's running version 7.0(8)E4.  I removed and re-added the one IPS module without any luck.  If I go into IME, the IPS has alerts, but none are getting to the MARS.  This was working last week.  I do see this one error in the IPS modules:

evError: eventId=1339001763298281005  vendor=Cisco  severity=error 

  originator:  

    hostId: ips

    appName: collaborationApp 

    appInstanceId: 516 

  time: Jun 25, 2012 14:26:07 UTC  offset=0  timeZone=UTC 

  errorMessage: Failed to upload data  name=errUnclassified evError: eventId=1339001763298281005  vendor=Cisco  severity=error 
  originator:  
    hostId: ascips 
    appName: collaborationApp 
    appInstanceId: 516 
  time: Jun 25, 2012 14:26:07 UTC  offset=0  timeZone=UTC 
  errorMessage: Failed to upload data  name=errUnclassified 

However, I cannot find anything on if this is relavent to my issue and if so, how to fix it.

TIA for any suggestions/help.

Dan

I have this problem too.
1 vote
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)

Actions

Login or Register to take actions

This Discussion

Posted June 25, 2012 at 7:44 AM
Stats:
Replies:0 Avg. Rating:
Views:4111 Votes:1
Shares:0
Tags: mars, ips, alerts
+

Related Content

Discussions Leaderboard