Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ISS Incident Issue

Hi,

I configured the ISS Siteprotector to send the alarm to MARS 6.0.2. In MARS, if I query for this ISS NIDS, I can find the lot of alarm received with the session ID. But I am not able to see those events on Dashboard or in incidents lists as the log send by ISS Sitepreotector are logged in MARS database with session ID but MARS is not assign the Incident ID to those events.

How can force MARS to assign the Incident ID to those events so i can able to monitor properly.

Thanks,

Regards,

Mustafa

119
Views
0
Helpful
0
Replies