Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

CS-MARS: reveal the "Unknown reporting devices"

I get a lot of events from "unknown reporting devices". How can I reveal the IP adressen of this devices?

Many thanx in advance!

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: CS-MARS: reveal the "Unknown reporting devices"

Click on an incident that is caused by unknown reporting devices. In the incident click the "expand all" button. In the "reporting device" column look for the little button which looks like a page with zeros accross and click on it. The "raw message" column shows you the IP address of the reporting device.

3 REPLIES
New Member

Re: CS-MARS: reveal the "Unknown reporting devices"

Click on an incident that is caused by unknown reporting devices. In the incident click the "expand all" button. In the "reporting device" column look for the little button which looks like a page with zeros accross and click on it. The "raw message" column shows you the IP address of the reporting device.

New Member

Re: CS-MARS: reveal the "Unknown reporting devices"

Thank you. This solved my problem!

Regards, Robbert

Cisco Employee

Re: CS-MARS: reveal the "Unknown reporting devices"

Click on Query/Reports. Edit Query Type.

In the pull down list "Result Format" choose "Unknown Event Report" and add in the time range you wish to run the report for.

Click "Apply" then "Submit"

If you do it for an extended amount of time, the button will automatically change from "submit inline" to "submit batch". If this happens you can find the report running in the background under the "Batch Query" subtab under "Query/Reports"

In that report you should find the unknown events and the IP addresses of the device responsible.

Raymond

316
Views
0
Helpful
3
Replies
CreatePlease to create content