Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

CSPM Not showing events

When I look at the Event Viewer in CSPM 2.3.3i, I don't see any events. I know I should see at leat a ICMP request but nothing is registered. I ran nrconns and it shows a good connection and nrstatus shows my daemons are running. Any thoughts?

1 REPLY
Cisco Employee

Re: CSPM Not showing events

Check the following things:

1. Is packetd running? Issue the nrstatus command on the Sensor.

2. Is the monitoring interface plugged into a hub or a switch SPAN port? Check the link status. Issue the snoop command on the Sensor and check if it the Sensor is sniffing traffic.

3. In CSPM, confirm the the name of the packet capture device.

Good Luck

94
Views
0
Helpful
1
Replies
CreatePlease to create content