cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
360
Views
0
Helpful
2
Replies

CSPM Event Viewer Error

lathian
Level 1
Level 1

Has anyone known why I get this error message in the Event Viewer Windows whenever I access to it ? I am using CSPM2.3.3 to manage IDSM & IDS box.

"deriveContext, non-hex-ascii chars found in incoming context"

"nrEventBrowser:processContext, deriveContext failed"

Thanks

2 Replies 2

marcabal
Cisco Employee
Cisco Employee

There was a bug in one of the older sensor versions where the context field had a problem on a few alarms.

You would need to remove the current alarms from your CSPM database (if you don't remove then you will continue receiving this error each time CSPM even viewer tries reading the bad alarm).

Then upgrade your sensor to the latest versions to prevent new bad alarms from generating.

Sensors have the latest version.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: