cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
372
Views
5
Helpful
2
Replies

CSMARS - added device not listed

a.kiprawih
Level 7
Level 7

Hi,

Anybody experienced this scenario before?

The devide that I added into MARS (Snort 2.0) does not appear in the device list. I need to modify/delete it as there was a mistake in the device properties/info.

However, this device did appear in the network topology.

Any idea?

Thank you in advance.

AK

2 Replies 2

dmitry
Level 1
Level 1

To add a Snort sensor you first need to create a SW host in the MARS (if it did not exist before) and then add to this host the Snort application and define the logging methond (pull or/and receive). Without the application or defined logging the SW host will not show up in the list of the devices / network topology.

You need to add the Snort to the "Existing SW host" now and your early defined SW host will show up.

Many thanks. Problem solved.

rgds,

AK